CVE-2013-6397: Path Traversal
Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.solr:solr-coreto a version that resolves this vulnerability.Fixed in 4.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6397?
CVE-2013-6397 is classified with a moderate severity rating, allowing unauthorized access to files.
How do I fix CVE-2013-6397?
To fix CVE-2013-6397, upgrade Apache Solr to version 4.6.0 or later.
Which versions of Apache Solr are affected by CVE-2013-6397?
CVE-2013-6397 affects Apache Solr versions 4.0.0 through 4.5.1.
What kind of attacks can CVE-2013-6397 enable?
CVE-2013-6397 allows remote attackers to exploit directory traversal to read arbitrary files on the server.
What parameters are involved in the CVE-2013-6397 vulnerability?
The CVE-2013-6397 vulnerability involves the tr parameter in the URL and the wt parameter set to XSLT.