Log in Start free

Vulnerability · Published Aug 17, 2020 · Assigned by apache

CVE-2020-13941

High 8.8

In plain English

A high-severity security flaw in Apache Solr. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.3% (higher than 93% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.8High
Exploit odds (30 days)5.3%top 7.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC

Official description

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12lucene-solr3.6.2+dfsg-23DEBIAN-CVE-2020-13941
Debian:13lucene-solr3.6.2+dfsg-23DEBIAN-CVE-2020-13941
Debian:14lucene-solr3.6.2+dfsg-23DEBIAN-CVE-2020-13941
Mavenorg.apache.solr:solr-parent8.6.0GHSA-2467-h365-j7hm
Ubuntu:22.04:LTSlucene-solrno fix listedUBUNTU-CVE-2020-13941
Ubuntu:24.04:LTSlucene-solrno fix listedUBUNTU-CVE-2020-13941
Ubuntu:25.10lucene-solrno fix listedUBUNTU-CVE-2020-13941
Ubuntu:26.04:LTSlucene-solrno fix listedUBUNTU-CVE-2020-13941
Ubuntu:26.10lucene-solrno fix listedUBUNTU-CVE-2020-13941

Affected products (as reported)

VendorProductVersions
n/a Apache Solr Prior to 8.6.0

References