Skip to content
OpenAdvisories
High · 7.5 CVE-2018-1308 EUVD-2018-0489GHSA-3pph-2595-cgfh

There is a XML external entity expansion (XXE) vulnerability in Apache Solr

Published Apr 9, 2018 · Updated Sep 17, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Solr Package: lucene-solr Package: lucene-solr Package: org.apache.solr:solr-core Ecosystem: Debian Ecosystem: Maven Ecosystem: Ubuntu

Description

This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Solr 1.2 to 6.6.2, 7.0.0 to 7.2.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 lucene-solr 3.6.2+dfsg-12 —
Debian 13 lucene-solr 3.6.2+dfsg-12 —
Debian 12 lucene-solr 3.6.2+dfsg-12 —
Debian 9 lucene-solr 3.6.2+dfsg-10+deb9u2 DSA-4194-1
Debian 8 lucene-solr 3.6.2+dfsg-5+deb8u2 DSA-4194-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 7 lucene-solr 3.6.0+dfsg-1+deb7u4 DLA-1360-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS lucene-solr No fix yet —
Ubuntu Pro 16.04 LTS lucene-solr No fix yet —
Ubuntu Pro 14.04 LTS lucene-solr 3.6.2+dfsg-2ubuntu0.1~esm2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.solr:solr-core >= 1.2, < 6.6.3 6.6.3 GHSA-3pph-2595-cgfh
Maven org.apache.solr:solr-core >= 7.0.0, < 7.3.0 7.3.0 GHSA-3pph-2595-cgfh

Advisories 2

References