Skip to content
OpenAdvisories

Product · Apache

Solr

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-12409 Public exploit EPSS 22%

    Unrestricted upload of file with dangerous type in Apache Solr

    The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, the…

    Apache Solr org.apache.solr:solr-core Maven