Read the docs
Red Hat Security Advisory

RHSA-2017:3124

Red Hat JBoss Enterprise Application Platform 7.0 security update

Released 2017-11-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2017-09354 CVE-2017-12629 · GHSA-mh7g-99w9-xpjm

XML external entity injection in Apache Solr before 7.1 with Apache Lucene before 7.1

Priority CRITICAL 85

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.91896 Published 2017-10-14 Partial fix · lucene-solr 7.2.0, lucene-solr 8.0.0 +4 CWE-611