{"id":"GHSA-2q2r-xgj5-h3hm","aliases":["CVE-2009-3821"],"title":"Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting","description":"Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","severity":"medium","score":null,"published":"2022-05-02T03:48:54.000Z","modified":"2024-02-08T22:28:13.482Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"apache-solr-for-typo3/solr","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.1"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.0.1"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2009-3821","https://github.com/TYPO3-Solr/ext-solr/commit/5192f489a13ff9417d7b57c63420187789beea5b","https://github.com/TYPO3-Solr/ext-solr","http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014"],"sources":[{"name":"OSV","id":"GHSA-2q2r-xgj5-h3hm","modified":"2024-02-08T22:28:13.482792Z","url":"https://osv.dev/vulnerability/GHSA-2q2r-xgj5-h3hm"}],"assessments":[]}