{"id":"GHSA-xc7q-q62f-wcvr","aliases":["CVE-2013-6289"],"title":"Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)","description":"Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","severity":"medium","score":4.3,"published":"2022-05-17T04:58:35.000Z","modified":"2023-11-08T03:57:25.754Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"apache-solr-for-typo3/solr","ranges":[{"events":[{"introduced":"0"},{"fixed":"2.8.3"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.8.3"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-6289","https://github.com/TYPO3-Solr/ext-solr/commit/57e3b06b498668e093b9b86f32f7509d12d6ae4e","https://github.com/TYPO3-Solr/ext-solr/commit/7ed1e9fc03f2036d80a416178493da72c620f7e9","https://github.com/TYPO3-Solr/ext-solr","http://secunia.com/advisories/54978","http://typo3.org/extensions/repository/view/solr","http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009","http://www.securityfocus.com/bid/62674"],"sources":[{"name":"OSV","id":"GHSA-xc7q-q62f-wcvr","modified":"2023-11-08T03:57:25.754906Z","url":"https://osv.dev/vulnerability/GHSA-xc7q-q62f-wcvr"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","score":4.3}]}