CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0-5.5.5 e 6.0.0-6.6.5 Questa è una PoC preliminare della RCE di Apache Solr Da https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI consente di configurare il server JMX di Solr tramite una richiesta HTTP POST. Puntandolo a un server RMI malevolo, un...

Remote Code Execution (RCE)

solr-core is vulnerable to remote code execution RCE. The vulnerability exists as ConfigAPI allows editing of the configuration for the Solar's JMX server through a HTTP POST request, which could be used to point to a malicious RMI server, resulting in unsafe deserialization...