Read the docs
TI-2021-20144 Aliases CVE-2021-44548GHSA-pccr-q7v9-5f27

Apache Solr information disclosure vulnerability through DataImportHandler

Priority MEDIUM 50CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB attacks, which may result in: * The exfiltration of sensitive data such as OS user hashes (NTLM/LM hashes), * In case of misconfigured systems, SMB Relay Attacks which can lead to user impersonation on SMB Shares or, in a worse-case scenario, Remote Code Execution This issue affects all Apache Solr versions prior to 8.11.1. This issue only affects Windows.

Why it matters now

EPSS 0.05234 92nd percentileScored 2026-11-07
Fix Fixed Apache Solr (Apache Software Foundation): 8.11.1org.apache.solr:solr-parent (Maven): 8.11.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Solrbefore 8.11.18.11.1Patch availableCNA
—org.apache.solr:solr-parent (Maven)before 8.11.18.11.1Patch availableGHSA-pccr-q7v9-5f27
  • Apache Solr VendorApache Affected before 8.11.1 Fixed in 8.11.1 Patch available CNA
  • org.apache.solr:solr-parent (Maven) Vendor— Affected before 8.11.1 Fixed in 8.11.1 Patch available GHSA-pccr-q7v9-5f27

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*before 8.11.1VulnerableApache
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:* Versions before 8.11.1 Vulnerable ·Apache
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA Apache Solr (Apache Software Foundation) Fixed in 8.11.1
  • Fix · GHSA-pccr-q7v9-5f27 org.apache.solr:solr-parent (Maven) Fixed in 8.11.1 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-44548
  2. 2026-10-03 Alias added: GHSA-pccr-q7v9-5f27

References

Advisory 3

Other 2

  • TI-2024-30303 Apache Solr: Authentication bypass possible using a fake URL Path ending CVSS 3.1CRITICAL 9.8
  • TI-2019-13101 Injection in Apache Solr KEVCVSS 3.1HIGH 7.5
  • TI-2019-00170 Code injection in Apache Solr KEVCVSS 3.1HIGH 7.2
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2021-09240 SSRF vulnerability with the Replication handler CVSS 3.1CRITICAL 9.8
  • TI-2017-09354 XML external entity injection in Apache Solr before 7.1 with Apache Lucene before 7.1 CVSS 3.1CRITICAL 9.8
See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences