Json response for search reveals Solr credentials
### Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. ### Patches The issue is fixed in all supported versions of ezsystems/ezplatform-solr-search-engine, see "Patched versions". An advisory is also published for ibexa/solr, please see that repository. Commit: https://github.com/ezsystems/ezplatform-solr-search-engine/commit/1005e02cc32ff15a705857fa56171528a83b9c3e ### Workarounds None. ### References https://developers.ibexa.co/security-advisories/ib
ezsystems/ezplatform-solr-search-engine ezsystems/ezplatform-solr-search-engine ezsystems/ezplatform-solr-search-enginePHP
- Обновитесь до 1.7.12
- Обновитесь до 2.0.2
- Обновитесь до 3.3.15
Опубликовано Обновлено