CVE-2019-0193: Apache Solr remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 8 October 1, Apache Solr official release for CVE-2019-0193 vulnerability alerts, vulnerability hazard rating is serious. The vulnerability appears in the Apache Solr DataImportHandler, the module is an optional but commonly used module for from the database and other sources to extract data...

Remote Code Execution

Apach Solr DataImportHandler is vulnerable to remote code execution RCE. The attack is possible because it allows an attacker to inject arbitrary code through request's dataConfig parameter which is used for setting the whole DIH configuration when using debug mode of the DIH admin screen...

cPanel Input Validation Error Vulnerability (CNVD-2019-26354)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 70.0.23. The vulnerability stems from a web-based...

XML External Entity (XXE) Injection in Apache Solr

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

GHSA-3GM7-V7VW-866C XML External Entity (XXE) Injection in Apache Solr

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2018-20917

cPanel before 70.0.23 allows any user to disable Solr SEC-371...

CVE-2018-20917

cPanel before 70.0.23 allows any user to disable Solr SEC-371...

Design/Logic Flaw

cPanel before 70.0.23 allows any user to disable Solr SEC-371...

CVE-2018-20917

cPanel before 70.0.23 allows any user to disable Solr SEC-371...

CVE-2018-20917

Affected product: cPanel prior to 70.0.23. The vulnerability (CVE-2018-20917) stems from an input validation issue and allows any user to disable Solr (SEC-371). This is documented across multiple sources (Red Hat, CNVD, NVD) with impact on availability. Exploitation details are not provided beyo...

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

DEBIAN-CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

Cross site request forgery (csrf)

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

UBUNTU-CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debuggi...

CVE-2019-0193

CVE-2019-0193 affects Apache Solr via the DataImportHandler (DIH) module. The vulnerability arises because DIH can read a request parameter dataConfig containing a DIH configuration, which can include scripts, enabling code injection. The issue is mitigated by requiring enabling the Java system p...