Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template 参考链接 漏洞产生原因： 1. 当攻击者可以直接访问Solr控制台时，可以通过发送类似/节点名/config的POST请求对该节点的配置文件做更改。 2. Apache...

VulnCheck KEV: CVE-2019-17558

The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution...

The vulnerability of the VelocityResponseWriter component of the Apache Solr search server, which allows a hacker to execute arbitrary code.

The vulnerability of the VelocityResponseWriter component of the Apache Solr search server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...