Description

Apache Solr select handler allows remote attackers to interact with internal network resources via Server Side Request Forgery (SSRF). Consult Web References for more information about this problem.

Remediation

Upgrade to Apache Solr 7.7.0 or later.

References

CVE-2017-3164

SSRF bible. Cheatsheet

Related Vulnerabilities

Joomla! Core 3.x.x Remote Code Execution (3.7.0 - 3.8.7)

Telerik Web UI RadAsyncUpload Deserialization

Grafana avatar SSRF

Apache Unomi MVEL RCE (CVE-2020-13942)

Unauthenticated remote code execution vulnerability in Confluence Server and Data Center

Severity

Medium

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Code Execution Acumonitor SSRF