PT-2018-11581 · Apache · Apache Solr

麦 香浓郁 · Publicado 2018-04-09 · Atualizado 2019-11-12 · CVE-2018-1308

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Solr versions 1.2 through 6.6.2 Apache Solr versions 7.0.0 through 7.2.1

Description The issue relates to an XML external entity expansion (XXE) in the &dataConfig=<inlinexml> parameter of Solr's DataImportHandler. This can be exploited to read arbitrary local files from the Solr server or the internal network using file, ftp, or http protocols.

Recommendations For Apache Solr versions 1.2 through 6.6.2, avoid using the &dataConfig=<inlinexml> parameter in the DataImportHandler until a patch is available. For Apache Solr versions 7.0.0 through 7.2.1, consider restricting access to the DataImportHandler to minimize the risk of exploitation.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2018-1308

DLA-1360-1

DSA-4194-1

GHSA-3PPH-2595-CGFH

Produtos afetados

Apache Solr

Referências · 24

• https://github.com/apache/lucene-solr/commit/3530397f1777332872eac2760f9aa0e2ae1d7450 · Nota
• https://github.com/apache/lucene-solr/commit/739a7933 · Nota
• https://github.com/apache/lucene-solr/commit/dd3be31f7062dcb2f3b2d7f0e89df29e197dee63 · Nota
• https://github.com/advisories/GHSA-3pph-2595-cgfh · Nota
• https://security-tracker.debian.org/tracker/source-package/lucene-solr · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4194-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1308 · Nota de Segurança
• https://debian.org/security/2018/dsa-4194 · Aviso do Fabricante
• https://mail-archives.apache.org/mod_mbox/www-announce/201804.mbox/%3C000001d3cf68%245ac69af0%241053d0d0%24%40apache.org%3E · Nota
• https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E · Nota
• https://cve.org/CVERecord?id=CVE-2018-1308 · Nota de Segurança
• https://lists.debian.org/debian-lts-announce/2018/04/msg00025.html · Nota
• https://ubuntu.com/security/CVE-2018-1308 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1308 · Nota de Segurança
• https://packages.debian.org/src:lucene-solr · Nota