Skip to content
OpenAdvisories

Package · Maven

org.apache.solr:solr-parent

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2021-27905 Public exploit Scanner template EPSS 93%

    SSRF vulnerability with the Replication handler

    The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the loc…

    Apache Software Foundation Apache Solr lucene-solr lucene-solr Debian Ubuntu Maven
  • Critical 9.8
    CVE-2020-13957 Public exploit EPSS 79%

    Incorrect Authorization in Apache Solr

    Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. Th…

    org.apache.solr:solr-core org.apache.solr:solr-parent org.apache.solr:solr-solrj Maven
  • High 8.8
    CVE-2020-13941 Public exploit

    Improper Input Validation in Apache Solr

    Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, r…

    lucene-solr lucene-solr org.apache.solr:solr-parent Debian Ubuntu Maven