CVE-2026-55465: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in intranda goobi-viewer-core
Description
CVE-2026-55465 is a medium severity vulnerability in intranda goobi-viewer-core versions from 22.04 up to but not including 26.05. It involves an unauthenticated REST endpoint that improperly concatenates user input into a Solr query without proper escaping or validation, allowing injection of Solr local-param syntax. This can bypass access-condition filters to access restricted georeferenced records. The issue is fixed in version 26.05.
CVSS v3.1
Score 5.3medium
Affected software
intranda
goobi-viewer-core
pkg:github/intranda/goobi-viewer-coreRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in the Goobi viewer's REST endpoint GET /api/v1/index/{solrField}/spatial/search, which accepts a user-supplied 'region' query parameter. This parameter is directly concatenated into a Solr query string without escaping, local-param stripping, or runtime schema enforcement. Attackers can inject Solr local-param syntax such as {!parent ...} and {!join ...} along with boolean operators to manipulate queries and bypass access restrictions on georeferenced records. The flaw affects versions >=22.04 and <26.05 and has been patched in version 26.05.
Potential Impact
An unauthenticated attacker can bypass access-condition filters on georeferenced records by injecting Solr query syntax, potentially gaining unauthorized read access to restricted data. The vulnerability does not impact integrity or availability but can lead to information disclosure.
Mitigation Recommendations
Upgrade to intranda goobi-viewer-core version 26.05 or later, where this vulnerability is patched. No other mitigations are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-16T22:10:37.608Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6adb6fb54d27ba8daa33ac65
Added to database: 10/23/2026, 14:31:17 UTC
Last enriched: 10/23/2026, 14:45:46 UTC
Last updated: 10/23/2026, 14:46:02 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.