Lucene search
K

4 matches found

Snyk
Snyk
added 2026/01/21 3:31 p.m.1 views

Missing Authorization

Overview org.apache.solr:solr-core is an open source enterprise search platform built on Apache Lucene Affected versions of this package are vulnerable to Missing Authorization in the Rule Based Authorization Plugin, by which the getPermissionName function can be forced to return null. An attacke...

8.3CVSS5.7AI score0.00236EPSS
Exploits0References2
OSV
OSV
added 2026/01/21 2:16 p.m.0 views

UBUNTU-CVE-2026-22022

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

8.2CVSS5.9AI score0.00236EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/21 1:41 p.m.5 views

EUVD-2026-3666

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components. Only deployments that meet all of the following criteria ar...

8.2CVSS5.6AI score0.00236EPSS
Exploits0References3
NVD
NVD
added 2025/06/18 11:15 a.m.3 views

CVE-2022-50201

In the Linux kernel, the following vulnerability has been resolved: selinux: fix memleak in securityreadstatekernel In this function, it directly returns the result of securityreadpolicy without freeing the allocated memory in data, cause memory leak issue, so free the memory if securityreadpolic...

5.5CVSS0.00065EPSS
Exploits0References4
Rows per page
Query Builder