Apache Solr 7.x < 7.7.4 / 8.x < 8.8.2 Multiple Vulnerabilities

The version of Apache Solr running on the remote host is 7.x prior to 7.7.4, or 8.x prior to 8.8.2. It is, therefore, affected by multiple vulnerabilities, including the following: - The ReplicationHandler normally registered at '/replication' under a Solr core has a 'masterUrl' also 'leaderUrl'...

Exploit for Server-Side Request Forgery in Apache Solr

CVE-2021-27905.POC POC for LFI related to CVE-2021-27905 POC...

Apache Solr SSRF漏洞 (CVE-2021-27905)

...

Apache Solr Server-Side Request Forgery (CVE-2021-27905)

A sever-side request forgery vulnerability exists in Apache Solr. The vulnerability is due to a lack of validation on the subdomain parameter in HTTP requests. Successful exploitation of this vulnerability could allow an unauthenticated attacker to make a request to any internal and external serv...

U.S. Dept Of Defense: SSRF due to CVE-2021-27905 in www.████████

Apache Solr is vulnerable to SSRF using the parameter "masterUrl". This issue is registered as CVE-2021-27905. Impact A successful SSRF attack can often result in unauthorized actions or access to data within the organization, either in the vulnerable application itself or on other back-end syste...

CVE-2021-27905

creationtimestamp| type| source ---|---|--- 2021-04-26 11:02:21+00:00| seen| https://t.me/CyberSecurityTechnologies/3219 2021-05-22 02:46:56+00:00| seen| https://t.me/pwnwikizhchannel/498 2022-07-06 05:30:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3213 2023-04-27...

CVE-2021-27905

CVE-2021-27905 (Solr SSRF) affects Apache Solr versions prior to 8.8.2 where the ReplicationHandler’s masterUrl/leaderUrl parameter can be abused to trigger SSRF. The flaw arises because masterUrl is not sufficiently validated against allowed hosts/schemes, enabling an attacker to cause the serve...