1516 matches found
Apache Solr security vulnerabilities
Apache Solr is a search server based on Lucene, developed by the Apache Foundation in the United States. This product supports faceted searching, vertical searching, and highlighting search results. There were security vulnerabilities in the Apache Solr versions 5.3.0 to 9.10.0. These...
PT-2026-3768
Name of the Vulnerable Software and Affected Versions Apache Solr versions 5.3.0 through 9.10.0 Description Deployments of Apache Solr utilizing the Rule Based Authorization Plugin are susceptible to unauthorized access to certain Solr APIs. This occurs due to insufficient input validation within...
CVE-2023-50720
XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vulnerability, search for objcontent:email using XWiki's...
CVE-2024-41674
CKAN is an open-source data management system for powering data hubs and data portals. If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message. This has been patched ...
CVE-2023-50719
XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are...
CVE-2022-25844 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-M2H2-264F-F486 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-QWQH-HM9M-P5HR vulnerabilities
Vulnerabilities for packages: solr...
CVE-2023-26116 vulnerabilities
Vulnerabilities for packages: solr...
CVE-2023-26118 vulnerabilities
Vulnerabilities for packages: solr...
CVE-2023-26117 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-2QQX-W9HR-Q5GX vulnerabilities
Vulnerabilities for packages: solr...
CVE-2024-8372 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-2VRF-HF26-JRP5 vulnerabilities
Vulnerabilities for packages: solr...
CVE-2024-8373 vulnerabilities
Vulnerabilities for packages: solr...
CVE-2023-26116 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-2QQX-W9HR-Q5GX vulnerabilities
Vulnerabilities for packages: solr...
GHSA-QWQH-HM9M-P5HR vulnerabilities
Vulnerabilities for packages: solr...