org.apache.solr:solr-dataimporthandler@4.0.0-ALPHA vulnerabilities
latest version
8.11.4
latest non vulnerable version
first published
16 years ago
latest version published
7 months ago
licenses detected
- [1.3.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.apache.solr:solr-dataimporthandler package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.apache.solr:solr-dataimporthandler is a Solr DataImportHandler Java Library. Affected versions of this package are vulnerable to XML External Entity (XXE) Injection. It is possible for an attacker to inject external entities through DataImportHandler's How to fix XML External Entity (XXE) Injection? Upgrade | [,8.0.0) |
org.apache.solr:solr-dataimporthandler is a full featured text search engine library written in Java. Affected versions of this package are vulnerable to XML External Entity (XXE) Injection in the How to fix XML External Entity (XXE) Injection? Upgrade | [,6.6.3)[7.0.0,7.3.0) |