Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...

VulnCheck KEV: CVE-2019-17558

The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution...

The vulnerability of the VelocityResponseWriter component of the Apache Solr search server, which allows a hacker to execute arbitrary code.

The vulnerability of the VelocityResponseWriter component of the Apache Solr search server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...