Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-hcng-56xk-tuar
Summary
Security Vulnerability in secure inter-node communication
This package uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism using the BasicAuthPlugin or if the user has implemented a custom Authentication plugin, which does not implement either `HttpClientInterceptorPlugin` or `HttpClientBuilderPlugin`, his/her servers are vulnerable to this attack. Users who only use SSL without basic authentication or those who use Kerberos are not affected.
Aliases
0
alias CVE-2017-7660
1
alias GHSA-c82r-qg3w-q5mv
Fixed_packages
0
url pkg:deb/debian/lucene-solr@0?distro=trixie
purl pkg:deb/debian/lucene-solr@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@0%3Fdistro=trixie
1
url pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-24?distro=trixie
purl pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-24?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-24%3Fdistro=trixie
2
url pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-26?distro=trixie
purl pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-26?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-26%3Fdistro=trixie
3
url pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-27?distro=trixie
purl pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-27?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-27%3Fdistro=trixie
4
url pkg:maven/org.apache.solr/solr-core@5.5.5
purl pkg:maven/org.apache.solr/solr-core@5.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-69cb-ed9r-guda
2
vulnerability VCID-atn8-a9f2-hqbq
3
vulnerability VCID-de4p-g9a9-1fcd
4
vulnerability VCID-f12z-qhkn-qyhb
5
vulnerability VCID-g95c-rfw6-kqgs
6
vulnerability VCID-n5hy-aw33-skh2
7
vulnerability VCID-vdk1-r552-kqhh
8
vulnerability VCID-x81k-2zr1-b7c3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.5.5
5
url pkg:maven/org.apache.solr/solr-core@6.6.0
purl pkg:maven/org.apache.solr/solr-core@6.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-45ku-xn2x-3fdg
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-8t99-tkmu-t3e7
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-w2ku-uvwz-4bhx
11
vulnerability VCID-x81k-2zr1-b7c3
12
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.6.0
Affected_packages
0
url pkg:maven/org.apache.solr/solr-core@5.3.0
purl pkg:maven/org.apache.solr/solr-core@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-dx2z-h52j-myd8
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-x81k-2zr1-b7c3
12
vulnerability VCID-ymkf-c5sn-f3fw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.3.0
1
url pkg:maven/org.apache.solr/solr-core@5.3.1
purl pkg:maven/org.apache.solr/solr-core@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.3.1
2
url pkg:maven/org.apache.solr/solr-core@5.3.2
purl pkg:maven/org.apache.solr/solr-core@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.3.2
3
url pkg:maven/org.apache.solr/solr-core@5.4.0
purl pkg:maven/org.apache.solr/solr-core@5.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.4.0
4
url pkg:maven/org.apache.solr/solr-core@5.4.1
purl pkg:maven/org.apache.solr/solr-core@5.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.4.1
5
url pkg:maven/org.apache.solr/solr-core@5.5.0
purl pkg:maven/org.apache.solr/solr-core@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
11
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.5.0
6
url pkg:maven/org.apache.solr/solr-core@5.5.1
purl pkg:maven/org.apache.solr/solr-core@5.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
11
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.5.1
7
url pkg:maven/org.apache.solr/solr-core@5.5.2
purl pkg:maven/org.apache.solr/solr-core@5.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
11
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.5.2
8
url pkg:maven/org.apache.solr/solr-core@5.5.3
purl pkg:maven/org.apache.solr/solr-core@5.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-x81k-2zr1-b7c3
11
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.5.3
9
url pkg:maven/org.apache.solr/solr-core@5.5.4
purl pkg:maven/org.apache.solr/solr-core@5.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-69cb-ed9r-guda
2
vulnerability VCID-atn8-a9f2-hqbq
3
vulnerability VCID-de4p-g9a9-1fcd
4
vulnerability VCID-f12z-qhkn-qyhb
5
vulnerability VCID-g95c-rfw6-kqgs
6
vulnerability VCID-hcng-56xk-tuar
7
vulnerability VCID-n5hy-aw33-skh2
8
vulnerability VCID-vdk1-r552-kqhh
9
vulnerability VCID-x81k-2zr1-b7c3
10
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.5.4
10
url pkg:maven/org.apache.solr/solr-core@6.0.0
purl pkg:maven/org.apache.solr/solr-core@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-48q3-wmzu-33fq
4
vulnerability VCID-4rb6-pu4t-r3c4
5
vulnerability VCID-69cb-ed9r-guda
6
vulnerability VCID-atn8-a9f2-hqbq
7
vulnerability VCID-de4p-g9a9-1fcd
8
vulnerability VCID-f12z-qhkn-qyhb
9
vulnerability VCID-g95c-rfw6-kqgs
10
vulnerability VCID-hcng-56xk-tuar
11
vulnerability VCID-n5hy-aw33-skh2
12
vulnerability VCID-th9k-npsc-mqax
13
vulnerability VCID-vdk1-r552-kqhh
14
vulnerability VCID-w2ku-uvwz-4bhx
15
vulnerability VCID-x81k-2zr1-b7c3
16
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.0.0
11
url pkg:maven/org.apache.solr/solr-core@6.0.1
purl pkg:maven/org.apache.solr/solr-core@6.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-69cb-ed9r-guda
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-w2ku-uvwz-4bhx
12
vulnerability VCID-x81k-2zr1-b7c3
13
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.0.1
12
url pkg:maven/org.apache.solr/solr-core@6.1.0
purl pkg:maven/org.apache.solr/solr-core@6.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-69cb-ed9r-guda
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-w2ku-uvwz-4bhx
12
vulnerability VCID-x81k-2zr1-b7c3
13
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.1.0
13
url pkg:maven/org.apache.solr/solr-core@6.2.0
purl pkg:maven/org.apache.solr/solr-core@6.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-69cb-ed9r-guda
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-w2ku-uvwz-4bhx
12
vulnerability VCID-x81k-2zr1-b7c3
13
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.2.0
14
url pkg:maven/org.apache.solr/solr-core@6.2.1
purl pkg:maven/org.apache.solr/solr-core@6.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-69cb-ed9r-guda
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-w2ku-uvwz-4bhx
12
vulnerability VCID-x81k-2zr1-b7c3
13
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.2.1
15
url pkg:maven/org.apache.solr/solr-core@6.3.0
purl pkg:maven/org.apache.solr/solr-core@6.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-69cb-ed9r-guda
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-w2ku-uvwz-4bhx
12
vulnerability VCID-x81k-2zr1-b7c3
13
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.3.0
16
url pkg:maven/org.apache.solr/solr-core@6.4.0
purl pkg:maven/org.apache.solr/solr-core@6.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2nwy-8r1n-y7cc
1
vulnerability VCID-3zcs-eg6f-fubn
2
vulnerability VCID-45ku-xn2x-3fdg
3
vulnerability VCID-69cb-ed9r-guda
4
vulnerability VCID-atn8-a9f2-hqbq
5
vulnerability VCID-de4p-g9a9-1fcd
6
vulnerability VCID-f12z-qhkn-qyhb
7
vulnerability VCID-g95c-rfw6-kqgs
8
vulnerability VCID-hcng-56xk-tuar
9
vulnerability VCID-n5hy-aw33-skh2
10
vulnerability VCID-vdk1-r552-kqhh
11
vulnerability VCID-w2ku-uvwz-4bhx
12
vulnerability VCID-x81k-2zr1-b7c3
13
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.4.0
17
url pkg:maven/org.apache.solr/solr-core@6.4.1
purl pkg:maven/org.apache.solr/solr-core@6.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-45ku-xn2x-3fdg
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-w2ku-uvwz-4bhx
11
vulnerability VCID-x81k-2zr1-b7c3
12
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.4.1
18
url pkg:maven/org.apache.solr/solr-core@6.4.2
purl pkg:maven/org.apache.solr/solr-core@6.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-45ku-xn2x-3fdg
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-w2ku-uvwz-4bhx
11
vulnerability VCID-x81k-2zr1-b7c3
12
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.4.2
19
url pkg:maven/org.apache.solr/solr-core@6.5.0
purl pkg:maven/org.apache.solr/solr-core@6.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-45ku-xn2x-3fdg
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-w2ku-uvwz-4bhx
11
vulnerability VCID-x81k-2zr1-b7c3
12
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.5.0
20
url pkg:maven/org.apache.solr/solr-core@6.5.1
purl pkg:maven/org.apache.solr/solr-core@6.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zcs-eg6f-fubn
1
vulnerability VCID-45ku-xn2x-3fdg
2
vulnerability VCID-69cb-ed9r-guda
3
vulnerability VCID-atn8-a9f2-hqbq
4
vulnerability VCID-de4p-g9a9-1fcd
5
vulnerability VCID-f12z-qhkn-qyhb
6
vulnerability VCID-g95c-rfw6-kqgs
7
vulnerability VCID-hcng-56xk-tuar
8
vulnerability VCID-n5hy-aw33-skh2
9
vulnerability VCID-vdk1-r552-kqhh
10
vulnerability VCID-w2ku-uvwz-4bhx
11
vulnerability VCID-x81k-2zr1-b7c3
12
vulnerability VCID-zseq-ezs2-wbhu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@6.5.1
References
0
reference_url http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7660
reference_id
reference_type
scores
url http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7660
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7660.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7660.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7660
reference_id
reference_type
scores
0
value 0.00335
scoring_system epss
scoring_elements 0.56628
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7660
3
reference_url https://github.com/apache/lucene-solr/commit/2f5ecbcf9ed7a3a4fd37b5c55860ad8eace1bea
reference_id
reference_type
scores
url https://github.com/apache/lucene-solr/commit/2f5ecbcf9ed7a3a4fd37b5c55860ad8eace1bea
4
reference_url https://github.com/apache/lucene-solr/commit/9f91c619a35db89544f5c85795df4128c9f0d96
reference_id
reference_type
scores
url https://github.com/apache/lucene-solr/commit/9f91c619a35db89544f5c85795df4128c9f0d96
5
reference_url https://github.com/apache/lucene-solr/commit/e3b0cfff396a7f92a4f621d598780116da916f3
reference_id
reference_type
scores
url https://github.com/apache/lucene-solr/commit/e3b0cfff396a7f92a4f621d598780116da916f3
6
reference_url https://github.com/apache/lucene-solr/commit/e912b7cb5c68fbb87b874d41068cf5a3aea17da0
reference_id
reference_type
scores
url https://github.com/apache/lucene-solr/commit/e912b7cb5c68fbb87b874d41068cf5a3aea17da0
7
reference_url https://issues.apache.org/jira/browse/SOLR-10624
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/SOLR-10624
8
reference_url https://lists.apache.org/thread/o0g7vpz5sz4yy0pyf1z94vkpv40x6h44
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/o0g7vpz5sz4yy0pyf1z94vkpv40x6h44
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7660
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7660
10
reference_url https://security.netapp.com/advisory/ntap-20181127-0003
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20181127-0003
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1473273
reference_id 1473273
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1473273
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-hcng-56xk-tuar