GHSA-xc7q-q62f-wcvr

Suggest an improvement
Source
https://github.com/advisories/GHSA-xc7q-q62f-wcvr
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xc7q-q62f-wcvr/GHSA-xc7q-q62f-wcvr.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-xc7q-q62f-wcvr
Aliases
  • CVE-2013-6289
Published
2022-05-17T04:58:35Z
Modified
2023-11-08T03:57:25Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)
Details

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Database specific 
{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2023-08-29T18:50:33Z",
    "nvd_published_at":  "2013-10-28T22:55:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / apache-solr-for-typo3/solr

Package

Name
apache-solr-for-typo3/solr
Purl
pkg:composer/apache-solr-for-typo3/solr

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.3

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xc7q-q62f-wcvr/GHSA-xc7q-q62f-wcvr.json"