Vulnerability-Lookup

CVE-2013-6397 (GCVE-0-2013-6397)

Vulnerability from cvelistv5 – Published: 2013-12-07 20:00 – Updated: 2024-08-06 17:39

Summary

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

9 references

URL	Tags
http://www.securityfocus.com/bid/63935	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2014-0029.html	vendor-advisoryx_refsource_REDHAT
https://issues.apache.org/jira/browse/SOLR-4882	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/11/27/1	mailing-listx_refsource_MLIST
http://secunia.com/advisories/55730	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2013-1844.html	vendor-advisoryx_refsource_REDHAT
http://lucene.apache.org/solr/4_6_0/changes/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/59372	third-party-advisoryx_refsource_SECUNIA
http://www.agarri.fr/kom/archives/2013/11/27/comp…	x_refsource_MISC

Date Public

2013-03-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:39:01.267Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "63935",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/63935"
          },
          {
            "name": "RHSA-2014:0029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.apache.org/jira/browse/SOLR-4882"
          },
          {
            "name": "[oss-security] 20131126 Re: CVE request: Apache Solr 4.6.0",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
          },
          {
            "name": "55730",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/55730"
          },
          {
            "name": "RHSA-2013:1844",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
          },
          {
            "name": "59372",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59372"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-03-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-04-27T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "63935",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/63935"
        },
        {
          "name": "RHSA-2014:0029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.apache.org/jira/browse/SOLR-4882"
        },
        {
          "name": "[oss-security] 20131126 Re: CVE request: Apache Solr 4.6.0",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
        },
        {
          "name": "55730",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/55730"
        },
        {
          "name": "RHSA-2013:1844",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
        },
        {
          "name": "59372",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59372"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-6397",
    "datePublished": "2013-12-07T20:00:00.000Z",
    "dateReserved": "2013-11-04T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:39:01.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2013-6397",
      "date": "2026-09-14",
      "epss": "0.56255",
      "percentile": "0.98992"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"4.5.1\", \"matchCriteriaId\": \"037FEB16-6126-4951-B8FD-D56CF268CFBF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"06216B21-FC73-480F-90A2-B0D358FAEE11\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*\", \"matchCriteriaId\": \"49D9F075-B18A-4634-8AA1-DE1399548838\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CFB9E78-22B2-4683-BD17-1600A3057FF3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4AF6C877-D6B6-40A8-9A73-0B327898F8E2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1C085709-D90B-44AC-89E1-3D2779956B89\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F36E7460-4056-4608-96BA-622FF2770DBB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8444B03D-D600-4C30-85F3-E2497270768A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA07EC5A-CE8F-403E-91C1-8E7D79CD573F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D09D035F-9B45-4758-ADCD-D6BF8B95AACB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:solr:4.5.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F01B2DB5-EFEB-472C-B7F7-0B7B5229D488\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de salto de directorio en SolrResourceLoader en Apache Solr anteriores a 4.6 permite a atacantes remotos leer ficheros arbitrarios a trav\\u00e9s de un .. (punto puno) o nombre de directorio completo en el par\\u00e1metro tr de solr/select/, cuando el escritor de respuesta (par\\u00e1metro wt) se establece a XLST. NOTA: esto puede ser aprovechado utilizando una vulnerabilidad XXE (XML eXternal Entity) diferente para permitir acceso a ficheros a trav\\u00e9s de l\\u00edmites de red restringidos.\"}]",
      "id": "CVE-2013-6397",
      "lastModified": "2024-11-21T01:59:08.797",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:N/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2013-12-07T20:55:02.633",
      "references": "[{\"url\": \"http://lucene.apache.org/solr/4_6_0/changes/Changes.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-1844.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-0029.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/55730\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/59372\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2013/11/27/1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/63935\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://issues.apache.org/jira/browse/SOLR-4882\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\"]}, {\"url\": \"http://lucene.apache.org/solr/4_6_0/changes/Changes.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-1844.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2014-0029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/55730\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/59372\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2013/11/27/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/63935\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://issues.apache.org/jira/browse/SOLR-4882\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-22\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2013-6397\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2013-12-07T20:55:02.633\",\"lastModified\":\"2026-04-29T01:13:23.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de salto de directorio en SolrResourceLoader en Apache Solr anteriores a 4.6 permite a atacantes remotos leer ficheros arbitrarios a trav\u00e9s de un .. (punto puno) o nombre de directorio completo en el par\u00e1metro tr de solr/select/, cuando el escritor de respuesta (par\u00e1metro wt) se establece a XLST. NOTA: esto puede ser aprovechado utilizando una vulnerabilidad XXE (XML eXternal Entity) diferente para permitir acceso a ficheros a trav\u00e9s de l\u00edmites de red restringidos.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.5.1\",\"matchCriteriaId\":\"037FEB16-6126-4951-B8FD-D56CF268CFBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06216B21-FC73-480F-90A2-B0D358FAEE11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*\",\"matchCriteriaId\":\"49D9F075-B18A-4634-8AA1-DE1399548838\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CFB9E78-22B2-4683-BD17-1600A3057FF3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AF6C877-D6B6-40A8-9A73-0B327898F8E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C085709-D90B-44AC-89E1-3D2779956B89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F36E7460-4056-4608-96BA-622FF2770DBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8444B03D-D600-4C30-85F3-E2497270768A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA07EC5A-CE8F-403E-91C1-8E7D79CD573F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D09D035F-9B45-4758-ADCD-D6BF8B95AACB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:solr:4.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F01B2DB5-EFEB-472C-B7F7-0B7B5229D488\"}]}]}],\"references\":[{\"url\":\"http://lucene.apache.org/solr/4_6_0/changes/Changes.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-1844.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-0029.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/55730\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/59372\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2013/11/27/1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/63935\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://issues.apache.org/jira/browse/SOLR-4882\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://lucene.apache.org/solr/4_6_0/changes/Changes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-1844.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2014-0029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/55730\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/59372\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2013/11/27/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/63935\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://issues.apache.org/jira/browse/SOLR-4882\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T12:37:19+00:00",
      "cve": "CVE-2013-6397",
      "id": "CVE-2013-6397",
      "initial_release_date": "2013-11-26T00:00:00+00:00",
      "product_status:fixed": "2",
      "product_status:known_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Solr: directory traversal when loading XSL stylesheets and Velocity templates",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-6397.json",
      "version": "3"
    }
  }
}

FKIE_CVE-2013-6397

Vulnerability from fkie_nvd - Published: 2013-12-07 20:55 - Updated: 2026-06-17 00:00

Severity

Summary

References

URL	Tags
secalert@redhat.com	http://lucene.apache.org/solr/4_6_0/changes/Changes.html
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2013-1844.html
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2014-0029.html
secalert@redhat.com	http://secunia.com/advisories/55730	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/59372
secalert@redhat.com	http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html	Exploit
secalert@redhat.com	http://www.openwall.com/lists/oss-security/2013/11/27/1
secalert@redhat.com	http://www.securityfocus.com/bid/63935
secalert@redhat.com	https://issues.apache.org/jira/browse/SOLR-4882	Patch
af854a3a-2127-422b-91ae-364da2661108	http://lucene.apache.org/solr/4_6_0/changes/Changes.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2013-1844.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2014-0029.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/55730	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/59372
af854a3a-2127-422b-91ae-364da2661108	http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2013/11/27/1
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/63935
af854a3a-2127-422b-91ae-364da2661108	https://issues.apache.org/jira/browse/SOLR-4882	Patch

Impacted products

Vendor	Product	Version
apache	solr	*
apache	solr	4.0.0
apache	solr	4.0.0
apache	solr	4.0.0
apache	solr	4.1.0
apache	solr	4.2.0
apache	solr	4.2.1
apache	solr	4.3.0
apache	solr	4.3.1
apache	solr	4.4.0
apache	solr	4.5.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "037FEB16-6126-4951-B8FD-D56CF268CFBF",
              "versionEndIncluding": "4.5.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "06216B21-FC73-480F-90A2-B0D358FAEE11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*",
              "matchCriteriaId": "49D9F075-B18A-4634-8AA1-DE1399548838",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "0CFB9E78-22B2-4683-BD17-1600A3057FF3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AF6C877-D6B6-40A8-9A73-0B327898F8E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C085709-D90B-44AC-89E1-3D2779956B89",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F36E7460-4056-4608-96BA-622FF2770DBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8444B03D-D600-4C30-85F3-E2497270768A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA07EC5A-CE8F-403E-91C1-8E7D79CD573F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D09D035F-9B45-4758-ADCD-D6BF8B95AACB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:solr:4.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F01B2DB5-EFEB-472C-B7F7-0B7B5229D488",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en SolrResourceLoader en Apache Solr anteriores a 4.6 permite a atacantes remotos leer ficheros arbitrarios a trav\u00e9s de un .. (punto puno) o nombre de directorio completo en el par\u00e1metro tr de solr/select/, cuando el escritor de respuesta (par\u00e1metro wt) se establece a XLST. NOTA: esto puede ser aprovechado utilizando una vulnerabilidad XXE (XML eXternal Entity) diferente para permitir acceso a ficheros a trav\u00e9s de l\u00edmites de red restringidos."
    }
  ],
  "id": "CVE-2013-6397",
  "lastModified": "2026-06-17T00:00:24.923",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-12-07T20:55:02.633",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/55730"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/59372"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/63935"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://issues.apache.org/jira/browse/SOLR-4882"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/55730"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/59372"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/63935"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://issues.apache.org/jira/browse/SOLR-4882"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-J8QW-MWMV-28CG

Vulnerability from github – Published: 2022-05-17 04:04 – Updated: 2024-03-05 00:24

Summary

Improper Limitation of a Pathname to a Restricted Directory in Apache Solr

Details

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.apache.solr:solr-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.6.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2013-6397"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-07-07T23:24:16Z",
    "nvd_published_at": "2013-12-07T20:55:00Z",
    "severity": "MODERATE"
  },
  "details": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.",
  "id": "GHSA-j8qw-mwmv-28cg",
  "modified": "2024-03-05T00:24:07Z",
  "published": "2022-05-17T04:04:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6397"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/lucene-solr/commit/da34b18cb3092df4972e2b6fa5178d1059923910"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/apache/lucene-solr"
    },
    {
      "type": "WEB",
      "url": "https://issues.apache.org/jira/browse/SOLR-4882"
    },
    {
      "type": "WEB",
      "url": "https://web.archive.org/web/20170307173358/http://www.securityfocus.com/bid/63935"
    },
    {
      "type": "WEB",
      "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
    },
    {
      "type": "WEB",
      "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Improper Limitation of a Pathname to a Restricted Directory in Apache Solr"
}

GSD-2013-6397

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2013-6397

Aliases

CVE-2013-6397

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2013-6397",
    "description": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.",
    "id": "GSD-2013-6397",
    "references": [
      "https://www.debian.org/security/2014/dsa-2963",
      "https://access.redhat.com/errata/RHSA-2014:0029",
      "https://access.redhat.com/errata/RHSA-2013:1844"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-6397"
      ],
      "details": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.",
      "id": "GSD-2013-6397",
      "modified": "2023-12-13T01:22:19.584665Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2013-6397",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2014-0029.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
          },
          {
            "name": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html",
            "refsource": "MISC",
            "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-1844.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
          },
          {
            "name": "http://secunia.com/advisories/55730",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/55730"
          },
          {
            "name": "http://secunia.com/advisories/59372",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/59372"
          },
          {
            "name": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html",
            "refsource": "MISC",
            "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
          },
          {
            "name": "http://www.openwall.com/lists/oss-security/2013/11/27/1",
            "refsource": "MISC",
            "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
          },
          {
            "name": "http://www.securityfocus.com/bid/63935",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/63935"
          },
          {
            "name": "https://issues.apache.org/jira/browse/SOLR-4882",
            "refsource": "MISC",
            "url": "https://issues.apache.org/jira/browse/SOLR-4882"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "(,4.5.1]",
          "affected_versions": "All versions up to 4.5.1",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-22",
            "CWE-937"
          ],
          "date": "2015-10-23",
          "description": "Directory traversal vulnerability in SolrResourceLoader in this package allows remote attackers to read arbitrary files via a `..` (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.",
          "fixed_versions": [
            "4.6.0",
            "5.0.0"
          ],
          "identifier": "CVE-2013-6397",
          "identifiers": [
            "CVE-2013-6397"
          ],
          "not_impacted": "All versions after 4.5.1",
          "package_slug": "maven/org.apache.solr/solr-core",
          "pubdate": "2013-12-07",
          "solution": "Upgrade to versions 4.6.0, 5.0.0 or above.",
          "title": "Directory traversal when loading XSL stylesheets and Velocity templates",
          "urls": [
            "https://bugzilla.redhat.com/CVE-2013-6397"
          ],
          "uuid": "aefb6b6f-4f53-4411-9a4e-1ed1fa86bac1"
        },
        {
          "affected_range": "(,4.5.1]",
          "affected_versions": "All versions up to 4.5.1",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-22",
            "CWE-937"
          ],
          "date": "2015-10-23",
          "description": "Directory traversal vulnerability in `SolrResourceLoader` in Apache Solr allows remote attackers to read arbitrary files via a `..` (dot dot) or full pathname in the tr parameter to `solr/select/`, when the response writer (wt parameter) is set to XSLT.",
          "fixed_versions": [
            "4.6.0"
          ],
          "identifier": "CVE-2013-6397",
          "identifiers": [
            "CVE-2013-6397"
          ],
          "not_impacted": "All versions after 4.5.1",
          "package_slug": "maven/org.apache.solr/solr-velocity",
          "pubdate": "2013-12-07",
          "solution": "Upgrade to version 4.6.0 or above.",
          "title": "Path Traversal",
          "urls": [
            "https://bugzilla.redhat.com/CVE-2013-6397"
          ],
          "uuid": "beab4a4e-aa11-4042-8e15-468d44ecf1ea"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "4.5.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:solr:4.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2013-6397"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "55730",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/55730"
            },
            {
              "name": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://lucene.apache.org/solr/4_6_0/changes/Changes.html"
            },
            {
              "name": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html"
            },
            {
              "name": "[oss-security] 20131126 Re: CVE request: Apache Solr 4.6.0",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2013/11/27/1"
            },
            {
              "name": "https://issues.apache.org/jira/browse/SOLR-4882",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://issues.apache.org/jira/browse/SOLR-4882"
            },
            {
              "name": "RHSA-2013:1844",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html"
            },
            {
              "name": "RHSA-2014:0029",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html"
            },
            {
              "name": "59372",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/59372"
            },
            {
              "name": "63935",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/63935"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T04:49Z",
      "publishedDate": "2013-12-07T20:55Z"
    }
  }
}

RHSA-2013:1844

Vulnerability from csaf_redhat - Published: 2013-12-16 18:16 - Updated: 2025-11-21 17:46

Summary

Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2013-6397.

CVE-2013-6397

6.4 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:N

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2013:1844

Open the full advisory

RHSA-2013_1844

Vulnerability from csaf_redhat - Published: 2013-12-16 18:16 - Updated: 2024-11-22 07:19

Summary

Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update

Severity

Important

Scope

4 vulnerabilities in this advisory, including CVE-2013-6397.

CVE-2013-6397

6.4 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:N

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2013:1844

Open the full advisory

RHSA-2014:0029

Vulnerability from csaf_redhat - Published: 2014-01-15 17:45 - Updated: 2026-08-04 22:04

Summary

Red Hat Security Advisory: Red Hat JBoss Data Grid 6.2.0 update

Severity

Important

Scope

8 vulnerabilities in this advisory, including CVE-2013-6397.

CVE-2013-6397

6.4 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:N

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2014:0029

Open the full advisory

RHSA-2014_0029

Vulnerability from csaf_redhat - Published: 2014-01-15 17:45 - Updated: 2024-11-22 07:29

Summary

Red Hat Security Advisory: Red Hat JBoss Data Grid 6.2.0 update

Severity

Important

Scope

8 vulnerabilities in this advisory, including CVE-2013-6397.

CVE-2013-6397

6.4 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:N

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2014:0029

Open the full advisory

ubuntu-cve-2013-6397

Vulnerability from osv_ubuntu

Published

2013-12-07 20:55

Modified

2025-07-16 04:50

Summary

Details

Severity

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2013-6397	REPORT
	https://issues.apache.org/jira/browse/SOLR-4882	REPORT
	http://www.openwall.com/lists/oss-security/2013/11/26	REPORT
	https://www.cve.org/CVERecord?id=CVE-2013-6397	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "liblucene3-contrib-java",
            "binary_version": "3.6.2+dfsg-2"
          },
          {
            "binary_name": "liblucene3-java",
            "binary_version": "3.6.2+dfsg-2"
          },
          {
            "binary_name": "liblucene3-java-doc",
            "binary_version": "3.6.2+dfsg-2"
          },
          {
            "binary_name": "libsolr-java",
            "binary_version": "3.6.2+dfsg-2"
          },
          {
            "binary_name": "solr-common",
            "binary_version": "3.6.2+dfsg-2"
          },
          {
            "binary_name": "solr-jetty",
            "binary_version": "3.6.2+dfsg-2"
          },
          {
            "binary_name": "solr-tomcat",
            "binary_version": "3.6.2+dfsg-2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "lucene-solr",
        "purl": "pkg:deb/ubuntu/lucene-solr@3.6.2+dfsg-2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.2+dfsg-2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.6.2+dfsg-1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "liblucene3-contrib-java",
            "binary_version": "3.6.2+dfsg-8"
          },
          {
            "binary_name": "liblucene3-java",
            "binary_version": "3.6.2+dfsg-8"
          },
          {
            "binary_name": "liblucene3-java-doc",
            "binary_version": "3.6.2+dfsg-8"
          },
          {
            "binary_name": "libsolr-java",
            "binary_version": "3.6.2+dfsg-8"
          },
          {
            "binary_name": "solr-common",
            "binary_version": "3.6.2+dfsg-8"
          },
          {
            "binary_name": "solr-jetty",
            "binary_version": "3.6.2+dfsg-8"
          },
          {
            "binary_name": "solr-tomcat",
            "binary_version": "3.6.2+dfsg-8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "lucene-solr",
        "purl": "pkg:deb/ubuntu/lucene-solr@3.6.2+dfsg-8?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.6.2+dfsg-8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.6.2+dfsg-7"
      ]
    }
  ],
  "aliases": [],
  "details": "Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.",
  "id": "UBUNTU-CVE-2013-6397",
  "modified": "2025-07-16T04:50:21Z",
  "published": "2013-12-07T20:55:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2013-6397"
    },
    {
      "type": "REPORT",
      "url": "https://issues.apache.org/jira/browse/SOLR-4882"
    },
    {
      "type": "REPORT",
      "url": "http://www.openwall.com/lists/oss-security/2013/11/26"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6397"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2013-6397"
  ],
  "withdrawn": "2025-07-18T16:42:56Z"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2013-6397 (GCVE-0-2013-6397)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature