Search for packages
| purl | pkg:maven/org.apache.solr/solr-core@8.8.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-68r2-fwcg-qpm8
Aliases: CVE-2025-24814 |
Apache Solr vulnerable to Execution with Unnecessary Privileges Core creation allows users to replace "trusted" configset files with arbitrary configuration … |
Vulnerable |
|
GHSA-4p5m-gvpf-f3x5
Aliases: CVE-2024-52012 |
Apache Solr Relative Path Traversal vulnerability Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable … |
Vulnerable |
|
GHSA-3hwc-rqwp-v36q
Aliases: CVE-2023-50291 |
Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies Insufficiently Protected Credentials vulnerability in Apache Solr. … |
Vulnerable |
|
GHSA-37vr-vmg4-jwpw
Aliases: CVE-2023-50386 |
Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload … |
Vulnerable |
|
GHSA-qr3p-2xj2-q7hq
Aliases: CVE-2026-22022 |
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin Deployments of Apache Solr 5.3.0 through 9.10.0 that … |
Vulnerable |
|
GHSA-vc2w-4v3p-2mqw
Aliases: CVE-2026-22444 |
Apache Solr: Insufficient file-access checking in standalone core-creation requests The "create core" API of Apache Solr 8.6 through 9.10.0 lacks … |
Vulnerable |
|
CVE-2023-50298
|
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, … |
Vulnerable Vulnerable |
|
CVE-2021-44548
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') An Improper Input Validation vulnerability in DataImportHandler of Apache … |
Vulnerable |
|
CVE-2023-44487
Aliases: GHSA-2m7v-gc89-fjqf GHSA-qppj-fm5r-hxr3 GHSA-vx74-f528-fxqg GHSA-xpw8-rcwv-8f8p |
Uncontrolled Resource Consumption The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-jgcr-fg3g-qvw8
|
Improper permission handling in Apache Solr When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider … |
CVE-2021-29262
|
|
CVE-2021-29943
|
Incorrect Authorization When using `ConfigurableInternodeAuthHadoopPlugin` for authentication, Apache Solr would forward/proxy distributed requests using server credentials instead of original client … | |
|
CVE-2021-28163
|
Improper Link Resolution Before File Access In Eclipse Jetty, if a user uses a webapps directory that is a symlink, … |
GHSA-j6qj-j888-vvgq
|
|
CVE-2020-27223
|
Uncontrolled Resource Consumption When Jetty handles a request containing multiple `Accept` headers with a large number of `quality` (i.e., `q`) … |
GHSA-m394-8rww-3jr7
|
|
CVE-2021-27905
|
Server-Side Request Forgery (SSRF) The `ReplicationHandler` (normally registered at `/replication` under a Solr core) in Apache Solr has a `masterUrl` … |