Skip to content
OpenAdvisories

Package · Maven

org.apache.solr:solr

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.1
    CVE-2024-45217

    Apache Solr: ConfigSets created during a backup restore command are trusted implicitly

    Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that…

    Apache Software Foundation Apache Solr lucene-solr org.apache.solr:solr Ubuntu Maven
  • Critical 9.8
    CVE-2024-45216 Public exploit Scanner template EPSS 93%

    Apache Solr: Authentication bypass possible using a fake URL Path ending

    Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, w…

    Apache Software Foundation Apache Solr lucene-solr org.apache.solr:solr Ubuntu Maven
  • Medium 6.1
    CVE-2015-8796

    Apache Solr Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL.

    org.apache.solr:solr Maven
  • Medium —
    CVE-2014-3628

    Improper Neutralization of Input During Web Page Generation in Apache Solr

    Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object.

    org.apache.solr:solr Maven