Incorrect Authorization in Apache Solr

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-29943 · ADVISORY
• lists.apache.org/thread.html/r91dd0ff556e0c9aab4c92852e0e540c59d4633718ce12881558cf44d%40%3Cusers.solr.apache.org%3E · WEB
• security.netapp.com/advisory/ntap-20210604-0009 · WEB
• security.netapp.com/advisory/ntap-20210604-0009 · Third Party Advisory

Lỗ hổng khác của org.apache.solr:solr-parent

• CVE-2021-44548NGHIÊM TRỌNG 9.8An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in…
• CVE-2021-27905NGHIÊM TRỌNG 9.8The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) p…
• CVE-2020-13957NGHIÊM TRỌNG 9.8Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for …
• CVE-2020-13941CAO 8.8Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.a…
• CVE-2018-11802TRUNG BÌNH 4.3In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. Howe…