Skip to content
OpenAdvisories

Package · Maven

org.apache.solr:solr-parent

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2021-27905 Public exploit Scanner template EPSS 93%

    SSRF vulnerability with the Replication handler

    The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the loc…

    Apache Software Foundation Apache Solr lucene-solr lucene-solr Debian Ubuntu Maven
  • High 8.8
    CVE-2020-13941 Public exploit

    Improper Input Validation in Apache Solr

    Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, r…

    lucene-solr lucene-solr org.apache.solr:solr-parent Debian Ubuntu Maven