CVE-2021-44548

🗓️ 23 Dec 2021 08:55:09Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 124 Views

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2021-44548	23 Dec 202112:19	–	circl
CNNVD	Apache Solr 路径遍历漏洞	20 Dec 202100:00	–	cnnvd
CNVD	Apache Solr Input Validation Error Vulnerability	22 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler	23 Dec 202108:55	–	cvelist
Debian CVE	CVE-2021-44548	23 Dec 202108:55	–	debiancve
EUVD	EUVD-2022-0662	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Solr Improper Input Validation and Path Traversal	6 Jan 202221:32	–	github
NCSC	Vulnerability fixed in Apache Solr for Windows	20 Dec 202100:00	–	ncsc
NVD	CVE-2021-44548	23 Dec 202109:15	–	nvd
OSV	BIT-SOLR-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler	6 Mar 202411:06	–	osv

NVD

Vulners

Node

apache solrRange<8.11.1

AND

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "Apache Solr",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "8.11.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
solr	www.solr.apache.org/security.html
security	www.security.netapp.com/advisory/ntap-20220114-0005/

21 Nov 2024 06:31Current

9.6High risk

Vulners AI Score9.6

CVSS 26.8

CVSS 3.19.8

EPSS0.05017

cve-2021-44548 apache solr dataimporthandler input validation windows smb network security vulnerability