Search for packages
| purl | pkg:maven/org.apache.solr/solr-core@9.1.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-68r2-fwcg-qpm8
Aliases: CVE-2025-24814 |
Apache Solr vulnerable to Execution with Unnecessary Privileges Core creation allows users to replace "trusted" configset files with arbitrary configuration … |
Vulnerable |
|
GHSA-4p5m-gvpf-f3x5
Aliases: CVE-2024-52012 |
Apache Solr Relative Path Traversal vulnerability Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable … |
Vulnerable |
|
GHSA-3hwc-rqwp-v36q
Aliases: CVE-2023-50291 |
Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies Insufficiently Protected Credentials vulnerability in Apache Solr. … |
Vulnerable |
|
GHSA-4wxw-42wx-2wfx
Aliases: CVE-2023-50292 |
Apache Solr Schema Designer blindly "trusts" all configsets Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources … |
Vulnerable |
|
GHSA-37vr-vmg4-jwpw
Aliases: CVE-2023-50386 |
Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload … |
Vulnerable |
|
GHSA-gg7w-pw2r-x2cq
Aliases: CVE-2023-50290 |
Apache Solr allows read access to host environmet variables Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache … |
Vulnerable |
|
GHSA-qr3p-2xj2-q7hq
Aliases: CVE-2026-22022 |
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin Deployments of Apache Solr 5.3.0 through 9.10.0 that … |
Vulnerable |
|
GHSA-vc2w-4v3p-2mqw
Aliases: CVE-2026-22444 |
Apache Solr: Insufficient file-access checking in standalone core-creation requests The "create core" API of Apache Solr 8.6 through 9.10.0 lacks … |
Vulnerable |
|
CVE-2023-50298
|
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, … |
Vulnerable Vulnerable |
|
CVE-2023-44487
Aliases: GHSA-2m7v-gc89-fjqf GHSA-qppj-fm5r-hxr3 GHSA-vx74-f528-fxqg GHSA-xpw8-rcwv-8f8p |
Uncontrolled Resource Consumption The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many … |
Vulnerable Vulnerable |