Lucene search
+L

1 matches found

OSV
OSV
added 2025/01/27 8:58 a.m.8 views

CVE-2025-24814 Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files

Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...

5.4CVSS6.4AI score0.01136EPSS
SaveExploits0References5
Rows per page
Query Builder