{"id":"CVE-2018-1308","details":"This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=\u003cinlinexml\u003e` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network.","aliases":["GHSA-3pph-2595-cgfh"],"modified":"2026-07-08T05:53:20.905408671Z","published":"2018-04-09T13:29:00.820Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"},{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/04/msg00025.html"},{"type":"ADVISORY","url":"https://mail-archives.apache.org/mod_mbox/www-announce/201804.mbox/%3C000001d3cf68%245ac69af0%241053d0d0%24%40apache.org%3E"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4194"},{"type":"REPORT","url":"https://issues.apache.org/jira/browse/SOLR-11971"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/lucene-solr","events":[{"introduced":"73c84accbd6f15a11cd97626991d7d59d2e5cbdb"},{"last_affected":"df4de29b55369876769bb741d687e47b67ff9613"},{"introduced":"3ba304b29825a94249c5145b3f5061e87b87d8f8"},{"last_affected":"b2b6438b37073bee1fca40374e85bf91aa457c0b"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.2"},{"last_affected":"6.6.2"},{"introduced":"7.0.0"},{"last_affected":"7.2.1"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1308.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/apache/solr","events":[{"introduced":"73c84accbd6f15a11cd97626991d7d59d2e5cbdb"},{"last_affected":"df4de29b55369876769bb741d687e47b67ff9613"},{"introduced":"3ba304b29825a94249c5145b3f5061e87b87d8f8"},{"last_affected":"b2b6438b37073bee1fca40374e85bf91aa457c0b"}],"database_specific":{"cpe":"cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.2"},{"last_affected":"6.6.2"},{"introduced":"7.0.0"},{"last_affected":"7.2.1"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1308.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}