CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Circl•added 2025/04/14 11:0 p.m.•47 views

CVE-2020-13941

creationtimestamp| type| source ---|---|--- 2025-04-14 23:00:06+00:00| published-proof-of-concept| Telegram/3Hw0ti8HK8QOqtOY2rsuqDdNwUtzE1sTstZVcrt4AbtXgI8 2025-05-04 21:02:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3loeqtdt36s2k...

8.8CVSS7.6AI score0.03805EPSS

Exploits0References1

Tenable Nessus•added 2023/09/15 12:0 a.m.•24 views

Apache Solr < 8.6.0 Information Disclosure (CVE-2020-13941)

The version of Apache Solr running on the remote host is prior to 8.6.0. It is, therefore, affected by an information disclosure vulnerability. The Replication handler allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could...

8.8CVSS7.9AI score0.03805EPSS

Exploits0References3

NVD•added 2020/08/17 1:15 p.m.•53 views

CVE-2020-13941

Reported in SOLR-14515 private and fixed in SOLR-14561 public, released in Solr version 8.6.0. The Replication handler https://lucene.apache.org/solr/guide/86/index-replication.htmlhttp-api-commands-for-the-replicationhandler allows commands backup, restore and deleteBackup. Each of these take a...

8.8CVSS8.8AI score0.03805EPSS

Exploits0References4

UbuntuCve•added 2020/08/17 1:15 p.m.•38 views

CVE-2020-13941

8.8CVSS7.2AI score0.03805EPSS

Exploits0References2

CVE•added 2020/08/17 12:16 p.m.•174 views

CVE-2020-13941

CVE-2020-13941 concerns Apache Solr’s replication handler. The vulnerability arises because the backup, restore, and deleteBackup HTTP API commands accept a location parameter that was not validated, enabling read/write access to any location the solr user can access. Multiple sources note this w...

8.8CVSS8.6AI score0.03805EPSS

Exploits0References4Affected Software1