High 1 exploited CVE DLA-1954-1 1 CVE

lucene-solr - security update

Published Oct 10, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	lucene-solr	3.6.2+dfsg-5+deb8u3

Vulnerabilities 1

High 7.2

CVE-2019-0193 Exploited Public exploit Scanner template EPSS 84%

XML External Entity (XXE) Injection in Apache Solr

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen…

Apache Apache Solr org.apache.solr:solr-core lucene-solr Debian Ubuntu Maven

Aug 1, 2019
KEV Dec 10, 2021