Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-56096

Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TYPO3

Description

The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A remote, unauthenticated attacker can use this syntax to enumerate indexed field names and extract their stored values through boolean- and range-based blind extraction techniques, independent of any site-specific configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TYPO3 Extension "Apache Solr for TYPO3 - Enterprise Search"

Default version status: unaffected

  • 13.0.0 to < 13.1.4affected
  • 12.0.0 to < 12.1.4affected
  • 11.5.0 to < 11.6.6affected
  • 0 to < 11.2.8affected

References