You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@lucene.apache.org by "davidchiu (JIRA)" <ji...@apache.org> on 2015/08/13 13:32:51 UTC

[jira] [Created] (SOLR-7920) Thers is a xss issue in schema-browser page of Admin Web UI.

davidchiu created SOLR-7920:
-------------------------------

             Summary: Thers is a xss issue in schema-browser page of Admin Web UI.
                 Key: SOLR-7920
                 URL: https://issues.apache.org/jira/browse/SOLR-7920
             Project: Solr
          Issue Type: Bug
          Components: web gui
    Affects Versions: 5.2.1, 4.10.4, 4.9
            Reporter: davidchiu


Open Solr Admin Web UI, select a core(such as collection1) and then click "schema-browse",and input a url like "http://127.0.0.1:8983/solr/#/collection1/schema-browser?field=cat=<img src=1 onerror=alert(1);>" to the browser address, you will get alert box with "1".



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org