CVE-2017-12629

CVE-2017-12629 affects Apache Solr before 7.1 (with Lucene before 7.1). The issue combines an XXE in the XML Query Parser (deftype=xmlparser) that can upload data to /upload or enable blind XXE for local file reads, and a second RCE path via RunExecutableListener reachable through a Config API ad...

CVE-2017-3163

CVE-2017-3163 affects Apache Solr when using the Index Replication feature. The vulnerability arises because Solr did not validate the file name in the HTTP API used to pull index files from a master/leader, enabling path traversal and exposing files readable by the Solr server process. Affected ...

CVE-2017-1000190

CVE-2017-1000190 affects SimpleXML (v2.7.1) and is an XXE flaw that can enable SSRF, information disclosure and DoS. Connected documents confirm affected context in IBM/Log Analysis (Solr-based deployment) and outline remediation: upgrade to IBM Operations Analytics - Log Analysis version 1.3.7 (...

CVE-2017-7660

CVE-2017-7660 affects Apache Solr inter-node communication when security is enabled. A specially crafted node name can mislead cluster nodes into treating a malicious node as a legitimate member if BasicAuth is enabled via BasicAuthPlugin or a custom authentication plugin that does not implement ...

CVE-2017-9803

CVE-2017-9803 affects Apache Solr’s Kerberos plugin, where delegation tokens can enable reuse of an end-user’s authentication. The documented issues include leakage of security configuration to non-super users and potential privilege escalation by malicious users when using a SecurityAwareZkACLPr...