How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

CVE-2025-66516: Apache Solr extraction module vulnerable to XXE attacks via XFA content in PDFs

calendar_today December 9, 2025 person domain apache-solr

Security advisory for CVE-2025-66516, an XXE vulnerability in Solr’s content extraction module triggered via XFA content embedded in PDF files.

open_in_new Read original post