The extension’s frontend detail‑view lookup does not enforce the current siteHash or frontend user access filter. An attacker who knows or can guess a valid Solr document ID can retrieve that document, bypassing the access controls that normally restrict visibility. This broken access control (CWE‑639) allows an unauthenticated visitor to read potentially confidential content that should be protected by site or user permissions.

TYPO3 installations that use the "Apache Solr for TYPO3 – Enterprise Search" extension are affected. The advisory does not specify a particular version, so any active deployment that includes the described lookup route is potentially vulnerable. Administrators should verify the extension version and compare with the most recent release that addresses the issue.

The CVSS score of 6.3 indicates moderate severity. No EPSS value is reported, suggesting that exploitation is not yet widespread but remains possible. An attacker only needs a valid Solr document ID, which may be guessed or enumerated, and then can access the document without proper authorization, leading to information disclosure. The vulnerability is likely exploitable through a standard HTTP request from the browser or a script, with no special privileges needed.