Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-search-solr-api

3 known vulnerabilities (1 high, 1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 1 medium, 1 low
Registry
Maven Central

Advisories 3

  • XWiki Solr script service doesn't take dropped programming right into account

    Affected: from 4.5.1, fixed in 15.10.13; from 16.0.0-rc-1, fixed in 16.4.4; from 16.5.0-rc-1, fixed in 16.8.0-rc-1.

  • XWiki Platform Solr search discloses password hashes of all users

    Affected: from 7.2-milestone-2, fixed in 14.10.15; from 15.0-rc-1, fixed in 15.5.2; from 15.6-rc-1, fixed in 15.7-rc-1.

  • CVE-2023-50720Medium 5.3

    XWiki Platform Solr search discloses email addresses of users

    Affected: fixed in 14.10.15; from 15.0-rc-1, fixed in 15.5.2; from 15.6-rc-1, fixed in 15.7-rc-1.