Solr-RCE-CVE-2019-0192

Solr-RCE-CVE-2019-0192 Apache Solr remote code execution via dataImportHandler Target Solr version: 1.3 – 8.2 Requirements: DataImportHandler should be enabled, which is not by default. I have tested on version 6.2 python python solrRCE.py...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by incorrect authorisation and XML external entity (XXE) vulnerabilities due to Apache Solr.

Summary Apache Solr is used by IBM Operations Analytics - Log Analysis as part of managing Solr collection and arbitary local file. CVE-2018-11802, CVE-2018-1308. Vulnerability Details CVEID:CVE-2018-11802 DESCRIPTION: In Apache Solr, the cluster can be partitioned into multiple collections and...

EUVD-2018-0489

Malware in sbrugna...

com.adobe.granite:com.adobe.granite.poi (1.0.2), com.day.crx:crx-server-j2ee (2.3.6) +46 more potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.8-beta4)

org.apache.poi:poi-ooxml MAVEN version 3.8-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - com.adobe.granite:com.adobe.granite.poi 1.0.2 - com.day.crx:crx-server-j2ee 2.3.6 -...

USN-7283-1 lucene-solr vulnerability

It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use this issue to execute arbitrary code...

USN-7283-1: Apache Solr vulnerability

It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use this issue to execute arbitrary code...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Apache Solr vulnerability (USN-7283-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7283-1 advisory. It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration....

org.apache.solr:solr-analysis-extras (8.8.0), org.apache.solr:solr-analytics (8.8.0) +10 more potentially affected by CVE-2025-24814 via org.apache.solr:solr-core (8.8.0)

org.apache.solr:solr-core MAVEN version 8.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr-analysis-extras 8.8.0 - org.apache.solr:solr-analytics 8.8.0 - org.apache.solr:solr-cell...

org.apache.solr:solr-analysis-extras (8.8.1), org.apache.solr:solr-analytics (8.8.1) +10 more potentially affected by CVE-2025-24814 via org.apache.solr:solr-core (8.8.1)

org.apache.solr:solr-core MAVEN version 8.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr-analysis-extras 8.8.1 - org.apache.solr:solr-analytics 8.8.1 - org.apache.solr:solr-cell...

io.redlink.solr:suggest-free-text (2.0.0), org.apache.solr:solr-analysis-extras (8.11.4) +12 more potentially affected by CVE-2025-24814 via org.apache.solr:solr-core (8.11.4)

org.apache.solr:solr-core MAVEN version 8.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - io.redlink.solr:suggest-free-text 2.0.0 - org.apache.solr:solr-analysis-extras 8.11.4 -...

BIT-SOLR-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

Apache Solr < 8.11.1 Information Disclosure

The version of Apache Solr running on the remote host is prior to 8.11.1. It is, therefore, affected by an information disclosure vulnerability due to improper input validation in DataImportHandler. The vulnerability allows an attacker to provide a Windows UNC path resulting in an SMB network cal...

com.findwise.hydra:hydra-solr-in (>=0.3.1, <=0.4.5), com.google.code:lucene-gosen-ipadic (1.2.1) +20 more potentially affected by CVE-2012-6612 via org.apache.solr:solr-core (3.4.0)

org.apache.solr:solr-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.findwise.hydra:hydra-solr-in =0.3.1, =1.9.0, =1.11.0, =4.0.0.beta2, =4.0.0.beta2, =4.0.0.final and more...

com.findwise.hydra:hydra-solr-in (>=0.3.1, <=0.4.5), com.google.code:lucene-gosen-ipadic (1.2.1) +20 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (3.4.0)

org.apache.solr:solr-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.findwise.hydra:hydra-solr-in =0.3.1, =1.9.0, =1.11.0, =4.0.0.beta2, =4.0.0.beta2, =4.0.0.final and more...

GHSA-PCCR-Q7V9-5F27 Apache Solr Improper Input Validation and Path Traversal

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

Remote Code Execution (RCE)

Apache Solr is vulnerable to remote code execution. The vulnerability exists due to lack of secure input validation in DataImportHandler resulting in the SMB attack and exfiltration of sensitive data...

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

Input validation

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...