Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-qhr7-h655-pw6r
  • Maven/org.apache.solr:solr-core
 Apache Solr has hardcoded credentials in the Basic Authentication setup tool 01 Jun
  • No fix available
  • Severity - 8.1 (High)
GHSA-qr3p-2xj2-q7hq
  • Maven/org.apache.solr:solr-core
 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin 21 Jan
  • Fix available
  • Severity - 8.2 (High)
GHSA-vc2w-4v3p-2mqw
  • Maven/org.apache.solr:solr-core
 Apache Solr: Insufficient file-access checking in standalone core-creation requests 21 Jan
  • Fix available
  • Severity - 7.1 (High)
GHSA-4p5m-gvpf-f3x5
  • Maven/org.apache.solr:solr-core
 Apache Solr Relative Path Traversal vulnerability 27 Jan 2025
  • Fix available
  • Severity - 6.6 (Medium)
GHSA-68r2-fwcg-qpm8
  • Maven/org.apache.solr:solr-core
 Apache Solr vulnerable to Execution with Unnecessary Privileges 27 Jan 2025
  • Fix available
  • Severity - 7.2 (High)
GHSA-37vr-vmg4-jwpw
  • Maven/org.apache.solr:solr-core
 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets 09 Feb 2024
  • Fix available
  • Severity - 8.8 (High)
GHSA-3hwc-rqwp-v36q
  • Maven/org.apache.solr:solr-core
 Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies 09 Feb 2024
  • Fix available
  • Severity - 7.5 (High)
GHSA-4wxw-42wx-2wfx
  • Maven/org.apache.solr:solr-core
 Apache Solr Schema Designer blindly "trusts" all configsets 09 Feb 2024
  • Fix available
GHSA-gg7w-pw2r-x2cq
  • Maven/org.apache.solr:solr-core
 Apache Solr allows read access to host environmet variables 15 Jan 2024
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-jq2w-w7v2-69q5
  • Maven/org.apache.solr:solr-core
 Apache Solr vulnerable to XML Bomb 24 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-6cpj-3g83-q2j4
  • Maven/org.apache.solr:solr-core
 Improper Restriction of XML External Entity Reference in Apache Solr 17 May 2022
  • Fix available
GHSA-45w3-2hvv-pfxq
  • Maven/org.apache.solr:solr-core
 XML Injection in Apache Solr 17 May 2022
  • Fix available
GHSA-998j-j6v9-5846
  • Maven/org.apache.solr:solr-core
 Apache Solr UpdateRequestHandler for XML resolves XML External Entities 17 May 2022
  • Fix available
GHSA-j8qw-mwmv-28cg
  • Maven/org.apache.solr:solr-core
 Improper Limitation of a Pathname to a Restricted Directory in Apache Solr 17 May 2022
  • Fix available
GHSA-mx2h-hf7j-2x3p
  • Maven/org.apache.solr:solr-core
 Improper Neutralization of Input During Web Page Generation in Apache Solr 17 May 2022
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-v6gf-x8fp-532v
  • Maven/org.apache.solr:solr-core
 Improper Neutralization of Input During Web Page Generation in Apache Solr 17 May 2022
  • Fix available
  • Severity - 6.1 (Medium)
Load more...