EUVD-2026-82417

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its privileged Solr backend. An...

CVE-2026-50022: Unintended Proxy or Intermediary

Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its privileged Solr backend. An...

PT-2026-95085

Name of the Vulnerable Software and Affected Versions Metacat versions prior to 3.4.2 Description Metacat is data repository software used for preserving, sharing, and discovering data. The MetacatSolrIndex.query function forwards the client-controlled qt parameter through Apache SolrJ from searc...

com.digitalpebble.stormcrawler:storm-crawler-solr (>=2.6, <=2.11), com.github.paulcwarren:content-solr-spring-boot-starter (>=3.0.0, <=3.0.7) +69 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj (>=9.0.0, <=9.4.0)

org.apache.solr:solr-solrj MAVEN version =9.0.0, =2.6, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.3.0 - com.kmwllc:lucille-core 0.2.0 - com.kmwllc:lucille-csv-example 0.2.0 - com.kmwllc:lucille-joining-db-connector-example 0.2.0 - com.kmwllc:lucille-ocr 0.2...

com.digitalpebble.stormcrawler:storm-crawler-solr (>=2.9, <=2.11), com.github.paulcwarren:content-solr-spring-boot-starter (>=3.0.0, <=3.0.7) +56 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj-streaming (>=9.2.0, <=9.4.0)

org.apache.solr:solr-solrj-streaming MAVEN version =9.2.0, =2.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.3.0 - com.kmwllc:lucille-core 0.2.0 - com.kmwllc:lucille-csv-example 0.2.0 - com.kmwllc:lucille-joining-db-connector-example 0.2.0 -...

com.digitalpebble.stormcrawler:storm-crawler-solr (>=2.9, <=2.11), com.github.paulcwarren:content-solr-spring-boot-starter (>=3.0.0, <=3.0.7) +56 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj-streaming (>=9.2.0, <=9.4.0)

org.apache.solr:solr-solrj-streaming MAVEN version =9.2.0, =2.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.3.0 - com.kmwllc:lucille-core 0.2.0 - com.kmwllc:lucille-csv-example 0.2.0 - com.kmwllc:lucille-joining-db-connector-example 0.2.0 -...

at.researchstudio.sat:won-matcher-solr (>=0.3, <=0.6), be.avhconsult:solr-scala-client_2.11 (0.0.13) +505 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj (>=6.0.0, <=8.11.2)

org.apache.solr:solr-solrj MAVEN version =6.0.0, =0.3, =0.0.2.alpha, =8.1.0.286, =2.0.0, =1.1.3, =1.1.6, =1.2.5, =1.1.7, =2.10.6.9, =3.0.6, =3.0.6, =4.6.1 and more Source cves: CVE-2023-50298 Source advisory: OSV:GHSA-XRJ7-X7GP-WWQR...

at.researchstudio.sat:won-matcher-solr (>=0.3, <=0.6), be.avhconsult:solr-scala-client_2.11 (0.0.13) +505 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj (>=6.0.0, <=8.11.2)

org.apache.solr:solr-solrj MAVEN version =6.0.0, =0.3, =0.0.2.alpha, =8.1.0.286, =2.0.0, =1.1.3, =1.1.6, =1.2.5, =1.1.7, =2.10.6.9, =3.0.6, =3.0.6, =4.6.1 and more Source cves: CVE-2023-50298 Source advisory: GHSA-XRJ7-X7GP-WWQR...

com.digitalpebble.stormcrawler:storm-crawler-solr (>=2.6, <=2.11), com.github.paulcwarren:content-solr-spring-boot-starter (>=3.0.0, <=3.0.7) +69 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj (>=9.0.0, <=9.4.0)

org.apache.solr:solr-solrj MAVEN version =9.0.0, =2.6, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.3.0 - com.kmwllc:lucille-core 0.2.0 - com.kmwllc:lucille-csv-example 0.2.0 - com.kmwllc:lucille-joining-db-connector-example 0.2.0 - com.kmwllc:lucille-ocr 0.2...

com.digitalpebble.stormcrawler:storm-crawler-solr (>=2.9, <=2.11), com.github.paulcwarren:content-solr-spring-boot-starter (>=3.0.0, <=3.0.7) +56 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj-streaming (>=9.2.0, <=9.4.0)

org.apache.solr:solr-solrj-streaming MAVEN version =9.2.0, =2.9, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.3.0 - com.kmwllc:lucille-core 0.2.0 - com.kmwllc:lucille-csv-example 0.2.0 - com.kmwllc:lucille-joining-db-connector-example 0.2.0 -...

com.digitalpebble.stormcrawler:storm-crawler-solr (>=2.6, <=2.11), com.github.paulcwarren:content-solr-spring-boot-starter (>=3.0.0, <=3.0.7) +69 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj (>=9.0.0, <=9.4.0)

org.apache.solr:solr-solrj MAVEN version =9.0.0, =2.6, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.3.0 - com.kmwllc:lucille-core 0.2.0 - com.kmwllc:lucille-csv-example 0.2.0 - com.kmwllc:lucille-joining-db-connector-example 0.2.0 - com.kmwllc:lucille-ocr 0.2...

at.researchstudio.sat:won-matcher-solr (>=0.3, <=0.6), be.avhconsult:solr-scala-client_2.11 (0.0.13) +505 more potentially affected by CVE-2023-50298 via org.apache.solr:solr-solrj (>=6.0.0, <=8.11.2)

org.apache.solr:solr-solrj MAVEN version =6.0.0, =0.3, =0.0.2.alpha, =8.1.0.286, =2.0.0, =1.1.3, =1.1.6, =1.2.5, =1.1.7, =2.10.6.9, =3.0.6, =3.0.6, =4.6.1 and more Source cves: CVE-2023-50298 Source advisory: MEND:CVE-2023-50298...

cn.aradin:aradin-lucene-solr-starter (>=0.0.2.alpha, <=1.1.2), cn.ibizlab.plugin:ibiz-plugin-solr (>=8.1.0.286, <=8.1.0.585.9) +348 more potentially affected by CVE-2020-13957 via org.apache.solr:solr-solrj (>=6.6.0, <=8.6.2)

org.apache.solr:solr-solrj MAVEN version =6.6.0, =0.0.2.alpha, =8.1.0.286, =2.0.0, =1.1.3, =1.21.1, =1.2.5, =1.1.7, =3.0.6, =3.0.6, =3.0.6, =2.1.2, =2.4.0 - com.cefriel:rmlmapper 1.1.0 - com.daasyyds.presto:daasyyds-hive-connector-patch 0.276.1-202209.1 -...

cn.aradin:aradin-lucene-solr-starter (>=0.0.2.alpha, <=1.1.2), cn.ibizlab.plugin:ibiz-plugin-solr (>=8.1.0.286, <=8.1.0.585.9) +348 more potentially affected by CVE-2020-13957 via org.apache.solr:solr-solrj (>=6.6.0, <=8.6.2)

org.apache.solr:solr-solrj MAVEN version =6.6.0, =0.0.2.alpha, =8.1.0.286, =2.0.0, =1.1.3, =1.21.1, =1.2.5, =1.1.7, =3.0.6, =3.0.6, =3.0.6, =2.1.2, =2.4.0 - com.cefriel:rmlmapper 1.1.0 - com.daasyyds.presto:daasyyds-hive-connector-patch 0.276.1-202209.1 -...

cn.aradin:aradin-lucene-solr-starter (>=0.0.2.alpha, <=1.1.2), cn.ibizlab.plugin:ibiz-plugin-solr (>=8.1.0.286, <=8.1.0.585.9) +348 more potentially affected by CVE-2020-13957 via org.apache.solr:solr-solrj (>=6.6.0, <=8.6.2)

org.apache.solr:solr-solrj MAVEN version =6.6.0, =0.0.2.alpha, =8.1.0.286, =2.0.0, =1.1.3, =1.21.1, =1.2.5, =1.1.7, =3.0.6, =3.0.6, =3.0.6, =2.1.2, =2.4.0 - com.cefriel:rmlmapper 1.1.0 - com.daasyyds.presto:daasyyds-hive-connector-patch 0.276.1-202209.1 -...