Improper Neutralization of Input During Web Page Generation in Apache Solr

Description

References

• nvd.nist.gov/vuln/detail/CVE-2015-8797 · ADVISORY
• issues.apache.org/jira/browse/SOLR-7949 · WEB
• www-01.ibm.com/support/docview.wss · WEB

Mais vulnerabilidades de org.apache.solr:solr-core

• CVE-2026-44825CRÍTICO 9.8Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 …
• CVE-2026-22444ALTO 7.1The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to ch…
• CVE-2026-22022ALTO 8.2Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorize…
• CVE-2025-24814MÉDIO 5.5Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemCon…
• CVE-2024-52012MÉDIO 5.4Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, …