CVE-2009-3821: Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
Other sources
Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/apache-solr-for-typo3/solrto a version that resolves this vulnerability.Fixed in 1.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3821?
CVE-2009-3821 is classified as a high severity cross-site scripting (XSS) vulnerability.
Who is affected by CVE-2009-3821?
CVE-2009-3821 affects users of the Apache Solr extension version 1.0.0 for TYPO3.
How do I fix CVE-2009-3821?
To resolve CVE-2009-3821, upgrade the Apache Solr extension for TYPO3 to version 1.0.1 or later.
What types of attacks can CVE-2009-3821 enable?
CVE-2009-3821 can enable remote attackers to inject arbitrary web scripts or HTML.
Are there any workarounds for CVE-2009-3821 until I can upgrade?
Currently, the best mitigation for CVE-2009-3821 is to apply the upgrade as there are no specific workarounds.