{"id":"CVE-2013-6397","published":"2013-12-07T20:00:00Z","modified":"2024-08-06T17:39:01Z","title":"Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT.  NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.56255,"percentile":0.99048,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-09-19","exploitedFirstSeen":"2024-09-19","ransomware":false,"evidence":[{"url":"https://www.f5.com/labs/articles/threat-intelligence/sensor-intel-series-top-cves-august-2024","date":"2024-09-19"},{"url":"https://www.f5.com/labs/articles/threat-intelligence/botpoke-scanner-switches-ip","date":"2024-11-25"},{"url":"https://www.f5.com/labs/articles/threat-intelligence/continued-scanning-for-cve-2023-1389","date":"2025-01-21"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/63935","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0029.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://issues.apache.org/jira/browse/SOLR-4882","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2013/11/27/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://secunia.com/advisories/55730","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1844.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lucene.apache.org/solr/4_6_0/changes/Changes.html","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/59372","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.solr:solr-core","vulnerableRanges":["<4.6.0"],"patched":["4.6.0"],"from":["GHSA-j8qw-mwmv-28cg"],"provenance":"source"}],"advisories":[{"id":"GHSA-j8qw-mwmv-28cg","url":"https://github.com/advisories/GHSA-j8qw-mwmv-28cg","severity":"MODERATE","ecosystem":"Maven","package":"org.apache.solr:solr-core","vulnerableRanges":["<4.6.0"],"patched":["4.6.0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-4317","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4317","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2013-12-07","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2013-6397","provenance":"source"},{"date":"2024-09-19","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.f5.com/labs/articles/threat-intelligence/sensor-intel-series-top-cves-august-2024","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":54.8,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 770 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.81,"detail":"percentile 0.9905"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2012-6612","published":"2013-12-07","fixed":"4.1.0","kev":false},{"cve":"CVE-2013-6407","published":"2013-12-07","fixed":"4.1.0","kev":false},{"cve":"CVE-2013-6408","published":"2013-12-07","fixed":"4.3.1","kev":false,"link":{"from":"CVE-2013-6408","to":"CVE-2013-6397","relation":"successor","confidence":"medium","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.solr:solr-core","fromFixed":"4.3.1","toFixed":"4.6.0","daysApart":0},{"kind":"similar","provenance":"machine","score":0.22,"basis":"same package + description similarity"}]}},{"cve":"CVE-2013-6397","published":"2013-12-07","fixed":"4.6.0","kev":false},{"cve":"CVE-2019-12401","published":"2019-09-10","fixed":"5.0.0","kev":false},{"cve":"CVE-2015-8795","published":"2016-02-15","fixed":"5.1.0","kev":false},{"cve":"CVE-2015-8797","published":"2016-02-15","fixed":"5.3.1","kev":false}],"package":"Maven:org.apache.solr:solr-core"}}