Description
Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.solr:solr | >= 4.0.0, < 4.10.3 | 4.10.3 | GHSA-wgw2-gw4v-9w4j |
References
- 62024 third-party-advisory
- [www-announce] 20141229 Apache Solr 4.10.3 released mailing-list