# apache-solr-for-typo3/solr (Packagist) vulnerabilities

8 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://packagist.org/packages/apache-solr-for-typo3/solr

## Advisories (8)

### [CVE-2026-56092](https://cve.now/CVE-2026-56092): Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

- Severity: High 7.6
- Published: Aug 25, 2026
- Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.

### [CVE-2026-56093](https://cve.now/CVE-2026-56093): Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

- Severity: Medium 6.3
- Published: Aug 25, 2026
- Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.

### [CVE-2026-56094](https://cve.now/CVE-2026-56094): Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

- Severity: Medium 6.3
- Published: Aug 25, 2026
- Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.

### [CVE-2026-56095](https://cve.now/CVE-2026-56095): Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

- Severity: High 7.7
- Published: Aug 25, 2026
- Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6.

### [CVE-2026-56096](https://cve.now/CVE-2026-56096): Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

- Severity: Medium 6.3
- Published: Aug 25, 2026
- Affected: from 13.0.0, fixed in 13.1.4; from 12.0.0, fixed in 12.1.4; from 11.5.0, fixed in 11.6.6; fixed in 11.2.8.

### [CVE-2013-6289](https://cve.now/CVE-2013-6289): Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to…

- Severity: Unrated
- Published: Oct 28, 2013
- Affected: fixed in 2.8.3.

### [CVE-2013-6288](https://cve.now/CVE-2013-6288): Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack…

- Severity: Unrated
- Published: Oct 28, 2013
- Affected: fixed in 2.8.3.

### [CVE-2009-3821](https://cve.now/CVE-2009-3821): Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject…

- Severity: Unrated
- Published: Oct 28, 2009
- Affected: fixed in 1.0.1.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/packagist/apache-solr-for-typo3/solr
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.