Improper Neutralization of Input During Web Page Generation in Apache Solr

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-8795 · ADVISORY
• issues.apache.org/jira/browse/SOLR-7346 · WEB

org.apache.solr:solr-core のその他の脆弱性

• CVE-2026-44825緊急 9.8Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 …
• CVE-2026-22444高 7.1The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to ch…
• CVE-2026-22022高 8.2Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorize…
• CVE-2025-24814中 5.5Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemCon…
• CVE-2024-52012中 5.4Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, …