org.apache.solr:solr-core
Maven26 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.apache.solr:solr-corepage 1 of 1
- CVE-2012-6612NONECVSS 0.0✓ Fixed in 4.1.02013-12-07
vulnerable: 1.3.0 ... 4.0.0-BETA (14 versions)
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity referenc…
- CVE-2013-6397NONECVSS 0.0✓ Fixed in 4.6.02013-12-07
vulnerable: 1.3.0 ... 4.5.1 (22 versions)
Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt paramet…
- CVE-2013-6407NONECVSS 0.0✓ Fixed in 4.1.02013-12-07
vulnerable: 1.3.0 ... 4.0.0-BETA (14 versions)
The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Ent…
- CVE-2013-6408NONECVSS 0.0✓ Fixed in 4.3.12013-12-07
vulnerable: 1.3.0 ... 4.3.0 (18 versions)
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction…
- CVE-2015-8795MEDIUMCVSS 6.1EG 6.1✓ Fixed in 5.1.02016-02-15
vulnerable: 1.3.0 ... 5.0.0 (37 versions)
Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis pag…
- CVE-2015-8797MEDIUMCVSS 6.1EG 6.1✓ Fixed in 5.3.12016-02-15
vulnerable: 1.3.0 ... 5.3.0 (41 versions)
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/…
- CVE-2017-12629CRITICALCVSS 9.8EG 9.8✓ Fixed in 5.5.52017-10-14
vulnerable: 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses L…
- CVE-2017-3163HIGHCVSS 7.5EG 7.5✓ Fixed in 6.4.12017-08-30
vulnerable: 6.0.0 ... 6.4.0 (7 versions)
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence i…
- CVE-2017-3164HIGHCVSS 7.5✓ Fixed in 7.7.02019-03-08
vulnerable: 1.3.0 ... 7.6.0 (79 versions)
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET…
- CVE-2017-7660HIGHCVSS 7.5EG 7.5✓ Fixed in 6.6.02017-07-07
vulnerable: 6.0.0 ... 6.5.1 (11 versions)
Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This ca…
- CVE-2017-9803HIGHCVSS 7.5EG 7.5✓ Fixed in 6.6.12017-09-18
vulnerable: 6.2.0 ... 6.6.0 (9 versions)
Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAware…
- CVE-2018-11802MEDIUMCVSS 4.3EG 4.3✓ Fixed in 6.6.62020-04-01
vulnerable: 1.3.0 ... 6.6.5 (68 versions)
In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a re…
- CVE-2018-1308HIGHCVSS 7.5✓ Fixed in 7.3.02018-04-09
vulnerable: 7.0.0, 7.0.1, 7.1.0, 7.2.0, 7.2.1
This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols…
- CVE-2018-8010MEDIUMCVSS 5.5✓ Fixed in 7.3.12018-05-21
vulnerable: 7.0.0 ... 7.3.0 (6 versions)
This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these con…
- CVE-2018-8026MEDIUMCVSS 5.5EG 5.5✓ Fixed in 6.6.52018-07-05
vulnerable: 6.0.0 ... 6.6.4 (16 versions)
This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition…
- CVE-2019-0192CRITICALCVSS 9.8EG 9.8✓ Fixed in 7.0.02019-03-07
vulnerable: 6.0.0 ... 6.6.6 (18 versions)
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserializat…
- CVE-2019-0193HIGHCVSS 7.2EG 9.0⚠ KEV✓ Fixed in 8.2.02019-08-01
vulnerable: 1.3.0 ... 8.1.1 (86 versions)
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of …
- CVE-2019-12401HIGHCVSS 7.5EG 7.5✓ Fixed in 5.0.02019-09-10
vulnerable: 1.3.0 ... 4.9.1 (36 versions)
Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create …
- CVE-2019-12409CRITICALCVSS 9.8EG 9.8✓ Fixed in 8.3.02019-11-18
vulnerable: 8.1.1, 8.2.0
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the af…
- CVE-2019-17558HIGHCVSS 7.5EG 9.0⚠ KEV✓ Fixed in 8.4.02019-12-30
vulnerable: 8.0.0 ... 8.3.1 (6 versions)
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A u…
- CVE-2020-13957CRITICALCVSS 9.8EG 9.8✓ Fixed in 8.6.32020-10-13
vulnerable: 6.6.0 ... 8.6.2 (35 versions)
Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authenticati…
- CVE-2021-29262HIGHCVSS 7.5EG 7.5✓ Fixed in 8.8.22021-04-13
vulnerable: 1.3.0 ... 8.8.1 (101 versions)
When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not tre…
- CVE-2023-50290MEDIUMCVSS 6.5EG 9.0✓ Fixed in 9.3.02024-01-15
vulnerable: 9.0.0, 9.1.0, 9.1.1, 9.2.0, 9.2.1
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environme…
- CVE-2023-50291HIGHCVSS 7.5EG 7.5✓ Fixed in 9.3.02024-02-09
vulnerable: 9.0.0, 9.1.0, 9.1.1, 9.2.0, 9.2.1
Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.3.0. One of the two endpoints that publishes the Solr process' Java system properties, /admi…
- CVE-2023-50292HIGHCVSS 7.5EG 7.5✓ Fixed in 8.11.32024-02-09
vulnerable: 8.10.0, 8.10.1, 8.11.0, 8.11.1, 8.11.2
Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema D…
- CVE-2023-50386HIGHCVSS 8.8EG 9.0✓ Fixed in 9.4.12024-02-09
vulnerable: 9.0.0 ... 9.4.0 (7 versions)
Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 throu…
Check whether org.apache.solr:solr-core is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.solr:solr-core CVEs against the assets you own.
Start Free Scan →