CVE-2013-6397

描述

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.

如何修補 CVE-2013-6397

要修補 CVE-2013-6397,請將受影響套件升級到下列已修補版本。

• Debian/lucene-solr—升級至 3.6.2+dfsg-2 或更新版本
• —升級至 4.6.0 或更新版本

CVE-2013-6397 正在被利用嗎?

可能 — EPSS 為 56.3%,屬於高被利用機率區間,建議優先修補。

受影響套件(2)

• from 0, < 3.6.2+dfsg-2
• from 0, < 4.6.0

參考連結(11)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2013-6397
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2013-6397
• PATCHgithub.com/apache/lucene-solr
• WEBlucene.apache.org/solr/4_6_0/changes/Changes.html
• WEB