org.apache.solr:solr-parent

3 results · Clear filters · Feed

• Critical 9.8
  CVE-2021-44548

  Apache Solr information disclosure vulnerability through DataImportHandler

  An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to …

  Apache Software Foundation Apache Solr org.apache.solr:solr-parent Maven
  Dec 23, 2021
• Critical 9.1
  CVE-2021-29943

  Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections

  When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization res…

  Apache Software Foundation Apache Solr lucene-solr org.apache.solr:solr-parent Ubuntu Maven
  Apr 13, 2021
• Critical 9.8
  CVE-2020-13957 Public exploit EPSS 79%

  Incorrect Authorization in Apache Solr

  Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. Th…

  org.apache.solr:solr-core org.apache.solr:solr-parent org.apache.solr:solr-solrj Maven
  Oct 13, 2020