Improper Neutralization of Input During Web Page Generation in Apache Solr

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2015-8797 · ADVISORY
• issues.apache.org/jira/browse/SOLR-7949 · WEB
• www-01.ibm.com/support/docview.wss · WEB

Lỗ hổng khác của org.apache.solr:solr-core

• CVE-2026-44825NGHIÊM TRỌNG 9.8Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 …
• CVE-2026-22444CAO 7.1The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to ch…
• CVE-2026-22022CAO 8.2Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorize…
• CVE-2025-24814TRUNG BÌNH 5.5Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemCon…
• CVE-2024-52012TRUNG BÌNH 5.4Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, …