https://bugzilla.redhat.com/show_bug.cgi?id=1179795
Bug ID: 1179795 Summary: CVE-2014-3628 solr: Cross-site scripting (XSS) vulnerability via the fieldvaluecache object Product: Security Response Component: vulnerability Keywords: Security Severity: low Priority: low Assignee: security-response-team@redhat.com Reporter: vkaigoro@redhat.com CC: java-sig-commits@lists.fedoraproject.org, puntogil@libero.it
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-3628 to the following vulnerability:
Name: CVE-2014-3628 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3628 Assigned: 20140514 Reference: http://secunia.com/advisories/62024
Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object.