Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | lucene-solr | 3.6.0+dfsg-1+deb7u2 |
Vulnerabilities 1
-
High 7.5
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to cr…