apache solr vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x prior to 4.10.3 allows remote malicious users to inject arbitrary web script or HTML via the fieldvaluecache object.

Apache Solr 4.0.0 Apache Solr 4.1.0 Apache Solr 4.2.0 Apache Solr 4.2.1 Apache Solr 4.3.0 Apache Solr 4.3.1 Apache Solr 4.4.0 Apache Solr 4.5.0 Apache Solr 4.5.1 Apache Solr 4.6.0 Apache Solr 4.6.1 Apache Solr 4.7.0

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe t...

Apache Solr 5.3.0 Apache Solr 5.3.1 Apache Solr 5.3.2 Apache Solr 5.4.0 Apache Solr 5.4.1 Apache Solr 5.5.0 Apache Solr 5.5.1 Apache Solr 5.5.2 Apache Solr 5.5.3 Apache Solr 5.5.4 Apache Solr 6.0.0 Apache Solr 6.0.1

Directory traversal vulnerability in SolrResourceLoader in Apache Solr prior to 4.6 allows remote malicious users to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this ca...

Apache Solr Apache Solr 4.0.0 Apache Solr 4.1.0 Apache Solr 4.2.0 Apache Solr 4.2.1 Apache Solr 4.3.0 Apache Solr 4.3.1 Apache Solr 4.4.0 Apache Solr 4.5.0

1 Github repository

Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e...

Apache Solr 6.2.0 Apache Solr 6.2.1 Apache Solr 6.3.0 Apache Solr 6.4.0 Apache Solr 6.4.1 Apache Solr 6.4.2 Apache Solr 6.5.0 Apache Solr 6.5.1 Apache Solr 6.6.0

The DocumentAnalysisRequestHandler in Apache Solr prior to 4.3.1 does not properly use the EmptyEntityResolver, which allows remote malicious users to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, relate...

Apache Solr Apache Solr 3.6.0 Apache Solr 3.6.1 Apache Solr 3.6.2 Apache Solr 4.0.0 Apache Solr 4.1.0 Apache Solr 4.2.0 Apache Solr 4.2.1

The UpdateRequestHandler for XML in Apache Solr prior to 4.1 allows remote malicious users to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Apache Solr Apache Solr 3.6.0 Apache Solr 3.6.1 Apache Solr 3.6.2 Apache Solr 4.0.0

Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension prior to 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."

Ingo Renner Apache Solr Ingo Renner Apache Solr 1.0 Ingo Renner Apache Solr 1.3.0 Ingo Renner Apache Solr 1.3.1 Ingo Renner Apache Solr 2.1.0 Ingo Renner Apache Solr 2.2.0 Ingo Renner Apache Solr 2.2.1 Ingo Renner Apache Solr 2.2.2 Ingo Renner Apache Solr 2.8.0 Ingo Renner Apache Solr 2.8.1

Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension prior to 2.8.3 for TYPO3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Ingo Renner Apache Solr Ingo Renner Apache Solr 1.0 Ingo Renner Apache Solr 1.3.0 Ingo Renner Apache Solr 1.3.1 Ingo Renner Apache Solr 2.1.0 Ingo Renner Apache Solr 2.2.0 Ingo Renner Apache Solr 2.2.1 Ingo Renner Apache Solr 2.2.2 Ingo Renner Apache Solr 2.8.0 Ingo Renner Apache Solr 2.8.1

The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr prior to 4.1 allows remote malicious users to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Ent...

Apache Solr Apache Solr 4.0.0

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will...

Apache Solr 8.1.1 Apache Solr 8.2.0

2 Github repositories

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook