All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-47898
MEDIUMpublished 2026-07-03 08:16 UTC · 1 day ago · modified 2026-07-03 10:16 UTC
4.0
CVSS / 10
// description
Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis.Common library). This issue affects Apache Lucene.Net.Analysis.Common: from 4.8.0-beta00005 before 4.8.0-beta00018. Users are recommended to upgrade to version 4.8.0-beta00018, which fixes the issue.
// weaknesses (CWE)
- CWE-611