Re: Vulnerabilities in SOLR 8.6.2

2020-12-11 Thread Walter Underwood
> 201-284-3345 > M: 845-300-3809 > Email: lakshmi.naraya...@mmc.com <mailto:lakshmi.naraya...@mmc.com> > > > From: Narayanan, Lakshmi <mailto:lakshmi.naraya...@mmc.com>> > Sent: Sunday, October 04, 2020 2:11 PM > To: solr-user@lucene.apache.org

Re: Vulnerabilities in SOLR 8.6.2

2020-09-29 Thread Cassandra Targett
Solr follows the ASF policy for reporting vulnerabilities, described in this page on our website: https://lucene.apache.org/solr/security.html. This page also lists known vulnerabilities that have been addressed, with their mitigation steps. Scanning tools are commonly full of false positives s