[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2013-6397":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":13,"technologies":45,"references":47,"score":61,"epss_score":62,"epss_percentile":63,"is_kev":10,"cisa_kev_date_added":64,"cisa_kev_due_date":64,"cisa_ssvc":65,"attack_mappings":71,"exploits":72},163693,"CVE-2013-6397","EUVD-2022-4317","Improper Limitation of a Pathname to a Restricted Directory in Apache Solr\n\nDirectory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr\u002Fselect\u002F, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.","2022-05-17T04:04:00Z",{},false,[12],"CWE-22",[14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44],"cpe:2.3:a:apache:solr:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.6.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:1.4.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.4.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.0.0:-:*:*:*:*:*:*","cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.6.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:1.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.5.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.3.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:-:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:1.4.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:solr:3.1.0:*:*:*:*:*:*:*",[46],"Apache Solr",[48,49,50,51,52,53,54,55,56,57,58,59,60],"http:\u002F\u002Flucene.apache.org\u002Fsolr\u002F4_6_0\u002Fchanges\u002FChanges.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-1844.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-0029.html","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F55730","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F59372","http:\u002F\u002Fwww.agarri.fr\u002Fkom\u002Farchives\u002F2013\u002F11\u002F27\u002Fcompromising_an_unreachable_solr_server_with_cve-2013-6397\u002Findex.html","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2013\u002F11\u002F27\u002F1","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F63935","https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FSOLR-4882","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2013-6397","https:\u002F\u002Fgithub.com\u002Fapache\u002Flucene-solr\u002Fcommit\u002Fda34b18cb3092df4972e2b6fa5178d1059923910","https:\u002F\u002Fgithub.com\u002Fapache\u002Flucene-solr","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20170307173358\u002Fhttp:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F63935",0,0.56255,0.99055,null,{"timestamp":64,"automatable":66,"tech_impact":67,"exploitation":68,"cisa_decision":69,"cisa_remediation_timeline":70},"no","partial","none",{},"FSU",[],[73],{"link":53}]