Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.solr/solr-parent@6.6.0
purl pkg:maven/org.apache.solr/solr-parent@6.6.0
Next non-vulnerable version 8.11.1
Latest non-vulnerable version 8.11.1
Risk score 10.0
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-5phw-3jrp-3vj8
Aliases:
CVE-2021-27905
Server-Side Request Forgery in Apache Solr The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has …
8.8.2
Vulnerable
GHSA-vf7p-j8x6-xvwp
Aliases:
CVE-2021-29943
Incorrect Authorization in Apache Solr When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests …
8.8.2
Vulnerable
GHSA-j346-h5wc-rw2m
Aliases:
CVE-2018-11802
Incorrect Authorization in Apache Solr In Apache Solr, the cluster can be partitioned into multiple collections and only a subset …
6.6.6
Vulnerable
GHSA-3c7p-vv5r-cmr5
Aliases:
CVE-2020-13957
Incorrect Authorization in Apache Solr Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some …
8.6.3
Vulnerable
GHSA-2467-h365-j7hm
Aliases:
CVE-2020-13941
Improper Input Validation in Apache Solr Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. …
8.6.0
Vulnerable
GHSA-pccr-q7v9-5f27
Aliases:
CVE-2021-44548
Apache Solr Improper Input Validation and Path Traversal An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an …
8.11.1
Not vulnerable
This package is not known to fix any advisories.