CVE-2013-6288 Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize
An insecure deserialization vulnerability in the Apache Solr extension for TYPO3 allows remote attackers to execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2013-6288?
CVE-2013-6288 is a critical unsafe deserialization vulnerability in n/a, published on 28 Oct 2013. It can be exploited over the network.
Official description
Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
Which versions are affected by CVE-2013-6288?
2 open source packages ship an affected version, including apache-solr-for-typo3/solr. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
apache-solr-for-typo3/solr Packagist | All versions | 2.8.3 |
apache-solr-for-typo3/solr Packagist | All versions | 2.8.3 |
Products include Ingo Renner Apache Solr.
How do I fix CVE-2013-6288?
Upgrade apache-solr-for-typo3/solr to 2.8.3 or later.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2013-6288 being exploited?
There is no known exploitation of CVE-2013-6288 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7m7g-jq4m-98w5.