Skip to content
OpenAdvisories

Package · Maven

org.apache.solr:solr-solrj

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-50298

    Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. Solr Streaming Expressions allows users to extract data from other Solr Clouds, using a…

    Apache Software Foundation Apache Solr druid lucene-solr Debian Wolfi Maven
  • Critical 9.8
    CVE-2020-13957 Public exploit EPSS 79%

    Incorrect Authorization in Apache Solr

    Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. Th…

    org.apache.solr:solr-core org.apache.solr:solr-parent org.apache.solr:solr-solrj Maven