Project: 
Search API Solr
Date: 
2018-October-10
Security risk: 
Moderately critical 10∕25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: 
Access bypass
Description: 

This module provides support for creating searches using the Apache Solr search engine and the Search API Drupal module.

The module doesn't sufficiently take the searched fulltext fields into account when creating a search excerpt. This can, in specific cases, lead to confidential data being leaked as part of the search excerpt.

Solution: 

Install the latest version:

Also see the Search API Solr Search project page.

Reported By: 
Fixed By: 
Coordinated By: