Skip to content
OpenAdvisories

Product · Apache

Apache Solr

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2019-0193 Exploited Public exploit EPSS 84%

    XML External Entity (XXE) Injection in Apache Solr

    In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen…

    Apache Apache Solr org.apache.solr:solr-core lucene-solr Debian Ubuntu Maven
    KEV Dec 10, 2021