Search for packages
purl | pkg:maven/org.apache.solr/solr-core@5.1.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6jkd-b9sn-aaak
Aliases: CVE-2017-9803 GHSA-f553-j2gv-g5r9 |
Privilege escalation Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using `SecurityAwareZkACLProvider` type of ACL provider e.g. `SaslZkACLProvider`). Firstly, access to the security configuration can be leaked to users other than the solr super user. Secondly, malicious users can exploit this leaked configuration for privilege escalation to further expose/modify private data and/or disrupt operations in the Solr cluster. |
Affected by 20 other vulnerabilities. |
VCID-9p2g-hkq3-aaan
Aliases: CVE-2021-44548 GHSA-pccr-q7v9-5f27 |
Improper Input Validation and Path Traversal in Apache Solr |
Affected by 6 other vulnerabilities. |
VCID-cwan-4pbv-aaab
Aliases: CVE-2020-13941 GHSA-2467-h365-j7hm |
Improper Input Validation in Apache Solr |
Affected by 11 other vulnerabilities. |
VCID-ewma-bdd5-aaaa
Aliases: CVE-2018-1308 GHSA-3pph-2595-cgfh |
There is a XML external entity expansion (XXE) vulnerability in Apache Solr |
Affected by 18 other vulnerabilities. Affected by 18 other vulnerabilities. Affected by 17 other vulnerabilities. |
VCID-g4qe-zn5z-aaaf
Aliases: CVE-2018-11802 GHSA-j346-h5wc-rw2m |
Incorrect Authorization in Apache Solr |
Affected by 13 other vulnerabilities. |
VCID-k73v-pu17-aaaj
Aliases: CVE-2017-3163 GHSA-387v-84cv-9qmc |
Moderate severity vulnerability that affects org.apache.solr:solr-core |
Affected by 15 other vulnerabilities. Affected by 20 other vulnerabilities. |
VCID-pg64-q2mr-aaam
Aliases: CVE-2019-17558 GHSA-ww97-9w65-2crx |
Improper Input Validation in Apache Solr |
Affected by 12 other vulnerabilities. Affected by 11 other vulnerabilities. |
VCID-rgqc-xt1z-aaah
Aliases: CVE-2015-8797 GHSA-v6gf-x8fp-532v |
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI. |
Affected by 15 other vulnerabilities. |
VCID-serq-s7kt-aaac
Aliases: CVE-2019-0193 GHSA-3gm7-v7vw-866c |
XML External Entity (XXE) Injection in Apache Solr |
Affected by 13 other vulnerabilities. |
VCID-vjex-gw45-aaae
Aliases: CVE-2021-27905 GHSA-5phw-3jrp-3vj8 |
Server-Side Request Forgery in Apache Solr |
Affected by 6 other vulnerabilities. |
VCID-wgyv-8paq-aaaf
Aliases: CVE-2019-0192 GHSA-xhcq-fv7x-grr2 |
Critical severity vulnerability that affects org.apache.solr:solr-core |
Affected by 15 other vulnerabilities. Affected by 19 other vulnerabilities. |
VCID-x36d-pdgz-aaag
Aliases: CVE-2021-29262 GHSA-jgcr-fg3g-qvw8 |
Improper permission handling in Apache Solr |
Affected by 6 other vulnerabilities. |
VCID-x6bt-nsqt-gfg2
Aliases: CVE-2025-24814 GHSA-68r2-fwcg-qpm8 |
solr: org.apache.solr: Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files |
Affected by 0 other vulnerabilities. |
VCID-x7h2-x9cc-aaan
Aliases: CVE-2021-29943 GHSA-vf7p-j8x6-xvwp |
Incorrect Authorization in Apache Solr |
Affected by 6 other vulnerabilities. |
VCID-yd1p-sfe9-aaam
Aliases: CVE-2017-3164 GHSA-vrh8-27q8-fr8f |
Low severity vulnerability that affects org.apache.solr:solr-core |
Affected by 13 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-ahtx-6hx3-aaas | Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js. |
CVE-2015-8795
GHSA-mx2h-hf7j-2x3p |