Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache Solr 9.4.1 Clear all filters
TI-2023-27507 CVE-2023-50298 · GHSA-xrj7-x7gp-wwqr

Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions

Priority MEDIUM 42

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01564 Published 2024-02-09 Fixed in 9.4.1, 8.11.3 CWE-200
TI-2023-27570 CVE-2023-50386 · GHSA-37vr-vmg4-jwpw

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Priority HIGH 81

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Sol…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.83719 Published 2024-02-09 Fixed in 9.4.1, 8.11.3 CWE-434