Log in Start free

Vulnerability · Published Oct 13, 2020 · Assigned by apache

CVE-2020-13957

Critical 9.8

In plain English

A critical-severity security flaw in Apache Solr. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 79.3% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)79.3%top 0.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC

Official description

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Mavenorg.apache.solr:solr-core8.6.3GHSA-3c7p-vv5r-cmr5
Mavenorg.apache.solr:solr-parent8.6.3GHSA-3c7p-vv5r-cmr5
Mavenorg.apache.solr:solr-solrj8.6.3GHSA-3c7p-vv5r-cmr5

Affected products (as reported)

VendorProductVersions
n/a Apache Solr Apache Solr 6.6.0 to 6.6.6, 7.0.0 to 7.7.3, 8.0.0 to 8.6.2

References