CVE-2013-6289

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published Bycve@mitre.org

Published DateOct 28, 2013, 22:55

Affected Versions(1)

apache-solr-for-typo3/solr(Packagist)

Introduced0

Fixed2.8.3

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
apache-solr-for-typo3/solr(Packagist)	0	2.8.3	N/A

Weakness Type (CWE):CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://secunia.com/advisories/54978
http://typo3.org/extensions/repository/view/solr
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009/
http://www.securityfocus.com/bid/62674

Weakness Type (CWE):CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE