- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8 · 2 high, 3 medium
- Registry
- Packagist
Advisories 8
- CVE-2026-56092High 7.6
Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.
- CVE-2026-56093Medium 6.3
Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.
- CVE-2026-56094Medium 6.3
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.
- CVE-2026-56095High 7.7
Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6.
- CVE-2026-56096Medium 6.3
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.
- CVE-2013-6289Unrated
Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to…
Affected: fixed in 2.8.3.
- CVE-2013-6288Unrated
Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack…
Affected: fixed in 2.8.3.
- CVE-2009-3821Unrated
Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject…
Affected: fixed in 1.0.1.