Lucene search
+L

14 matches found

osv_bit
osv_bit
•added 2024/03/06 11:05 a.m.•62 views

BIT-SOLR-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7.1AI score0.03024EPSS
SaveExploits0References3
Veracode
Veracode
•added 2024/02/12 10:04 a.m.•38 views

Missing Authorization

Apache Solr is vulnerable to Missing Authorization. The vulnerability is caused due to lack of authentication checks within the Schema Designer, allowing an attacker to load configSets without proper authentication, resulting in arbitrary code execution...

7.5CVSS7.4AI score0.03024EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2024/02/09 6:31 p.m.•47 views

Apache Solr Schema Designer blindly "trusts" all configsets

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configur...

7.5CVSS7.6AI score0.03024EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2024/02/09 6:31 p.m.•20 views

GHSA-4WXW-42WX-2WFX Apache Solr Schema Designer blindly "trusts" all configsets

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configur...

7.5CVSS6.9AI score0.03024EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2024/02/09 6:15 p.m.•10 views

DEBIAN-CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7AI score0.03024EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/09 6:15 p.m.•48 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS8AI score0.03024EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/09 6:15 p.m.•51 views

Design/Logic Flaw

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

5CVSS7.5AI score0.03024EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2024/02/09 6:15 p.m.•52 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS6.9AI score0.03024EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2024/02/09 6:15 p.m.•21 views

UBUNTU-CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7AI score0.03024EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/02/09 5:29 p.m.•60 views

CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS7.1AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/02/09 5:29 p.m.•71 views

CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

8AI score0.03024EPSS
SaveExploits0References2
Mend
Mend
•added 2024/02/09 5:29 p.m.•10 views

CVE-2023-50292

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

8.7CVSS0.03024EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•8 views

CVE-2023-50292: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configu...

7.5CVSS6AI score0.03024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•3 views

PT-2024-2360

Name of the Vulnerable Software and Affected Versions Apache Solr versions 8.10.0 through 8.11.2 Apache Solr versions 9.0.0 through 9.2.x Description The issue is related to an Incorrect Permission Assignment for Critical Resource and Improper Control of Dynamically-Managed Code Resources...

7.8CVSS6AI score0.03024EPSS
SaveExploits0References25
Rows per page
Query Builder