Lucene search
K

4 matches found

OSV
OSV
added 2024/03/06 11:6 a.m.14 views

BIT-SOLR-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

9.8CVSS9.6AI score0.05087EPSS
Exploits0References3
OSV
OSV
added 2021/12/23 9:15 a.m.21 views

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

9.8CVSS7.2AI score0.05087EPSS
Exploits0References2
NVD
NVD
added 2021/12/23 9:15 a.m.31 views

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB...

9.8CVSS0.05087EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2020/08/17 7:13 a.m.36 views

CVE-2020-13941

A flaw was found in Solr. The Replication handler allows commands backup, restore, and delete backup that take non-validated allocation parameters which may result in the exfiltration of sensitive data such as OS user hashes NTLM/LMhashes. The highest threat from this vulnerability is to data...

8.8CVSS4.1AI score0.03805EPSS
Exploits0References7
Rows per page
Query Builder