PT-2019-12786 · Apache · Solr
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Solr versions 1.3.0 through 1.4.1
Solr versions 3.1.0 through 3.6.2
Solr versions 4.0.0 through 4.10.4
Solr versions prior to 5.0.0
Description
The issue allows for an XML resource consumption attack, also known as a Lol Bomb, via the update handler. By using XML DOCTYPE and ENTITY type elements, an attacker can create a pattern that expands when the server parses the XML, causing out-of-memory (OOM) errors.
Recommendations
For Solr versions 1.3.0 through 1.4.1, update to version 5.0.0 or later.
For Solr versions 3.1.0 through 3.6.2, update to version 5.0.0 or later.
For Solr versions 4.0.0 through 4.10.4, update to version 5.0.0 or later.
For Solr versions prior to 5.0.0, update to version 5.0.0 or later.
As a temporary workaround, consider restricting access to the update handler until a patch is available.
Exploit
Correção
XML Entity Expansion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Solr