Remote Code Execution

Apach Solr DataImportHandler is vulnerable to remote code execution RCE. The attack is possible because it allows an attacker to inject arbitrary code through request's dataConfig parameter which is used for setting the whole DIH configuration when using debug mode of the DIH admin screen...