CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5 This is an early PoC of the Apache Solr RCE From https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI allows to configure Solr's JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker coul...

Remote Code Execution (RCE)

solr-core is vulnerable to remote code execution RCE. The vulnerability exists as ConfigAPI allows editing of the configuration for the Solar's JMX server through a HTTP POST request, which could be used to point to a malicious RMI server, resulting in unsafe deserialization...