Lucene search

K
cvelistApacheCVELIST:CVE-2017-3164
HistoryFeb 12, 2019 - 12:00 a.m.

CVE-2017-3164

2019-02-1200:00:00
apache
raw.githubusercontent.com
1

7.5 High

AI Score

Confidence

High

0.137 Low

EPSS

Percentile

95.6%

Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the “shards” parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.

7.5 High

AI Score

Confidence

High

0.137 Low

EPSS

Percentile

95.6%