TYPO3 Extension "Apache Solr For TYPO3 - Enterprise Search"
5 CVEs affecting TYPO3 Extension "Apache Solr For TYPO3 - Enterprise Search". Latest disclosed: 2026-08-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-56096 | | 2026-08-25 | The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors… | |
CVE-2026-56095 | | 2026-08-25 | The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data f… | |
CVE-2026-56094 | | 2026-08-25 | The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and… | |
CVE-2026-56093 | | 2026-08-25 | The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular searc… | |
CVE-2026-56092 | | 2026-08-25 | The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persist… |