Skip to content
OpenAdvisories

Package · Ubuntu

lucene-solr

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-45216 Public exploit Scanner template EPSS 93%

    Apache Solr: Authentication bypass possible using a fake URL Path ending

    Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, w…

    Apache Software Foundation Apache Solr lucene-solr org.apache.solr:solr Ubuntu Maven
  • Critical 9.8
    CVE-2019-0192 Public exploit Scanner template EPSS 78%

    Critical severity vulnerability that affects org.apache.solr:solr-core

    In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remot…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven
  • Critical 9.8
    CVE-2017-12629 Public exploit Scanner template EPSS 92%

    Remote code execution occurs in Apache Solr

    Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulner…

    org.apache.solr:solr-core lucene-solr lucene-solr Debian Ubuntu Maven