p PatchFirst

GHSA-7crc-r3wg-cfgf

GHSA-7crc-r3wg-cfgf · Json response for search reveals Solr credentials

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

### Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. ### Patches The issue is fixed in all supported versions of ezsystems/ezplatform-solr-search-engine, see "Patched versions". An advisory is also published for ibexa/solr, please see that repository. Commit: https://github.com/ezsystems/ezplatform-solr-search-engine/commit/1005e02cc32ff15a705857fa56171528a83b9c3e ### Workarounds None. ### References https://developers.ibexa.co/security-advisories/ibexa-sa-2023-005-vulnerabilities-in-solr-search-and-file-downloads

Corrección disponible

Publicación
Actualización

Pila tecnológica: php

Productos y versiones afectados

  • ezsystems/ezplatform-solr-search-engine Packagist

    Versiones
    • v3.3.0
    • v3.3.1
    • v3.3.10
    • v3.3.11
    • v3.3.12
    • v3.3.13
    • v3.3.14
    • v3.3.2
    • v3.3.3
    • v3.3.4
    • v3.3.5
    • v3.3.6
    • v3.3.7
    • v3.3.8
    • v3.3.9
    Intervalos de versiones afectados
    • ECOSYSTEM: ≥ 3.3.0, < 3.3.15

    Actualiza a 3.3.15

  • ezsystems/ezplatform-solr-search-engine Packagist

    Versiones
    • v2.0.0
    • v2.0.1
    Intervalos de versiones afectados
    • ECOSYSTEM: ≥ 2.0.0, < 2.0.2

    Actualiza a 2.0.2

  • ezsystems/ezplatform-solr-search-engine Packagist

    Versiones
    • v1.7.0
    • v1.7.1
    • v1.7.10
    • v1.7.11
    • v1.7.2
    • v1.7.2-rc1
    • v1.7.3
    • v1.7.3-rc1
    • v1.7.4
    • v1.7.5
    • v1.7.6
    • v1.7.7
    • v1.7.8
    • v1.7.9
    Intervalos de versiones afectados
    • ECOSYSTEM: ≥ 1.7.0, < 1.7.12

    Actualiza a 1.7.12

Fuentes originales

Comprueba tu servidor →