PT-2019-8565 · Apache+1 · Apache Solr+1

Publicado

2019-03-08

·

Atualizado

2020-12-09

·

CVE-2017-3164

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache Solr versions 1.3 through 7.6
Description The issue allows a remote attacker with access to the server to make Apache Solr perform an HTTP GET request to any reachable URL, due to the lack of a whitelist mechanism for the shards parameter. This enables Server Side Request Forgery.
Recommendations For Apache Solr versions 1.3 through 7.6, consider restricting access to the shards parameter to minimize the risk of exploitation. As a temporary workaround, restrict the Solr server from making HTTP GET requests to unauthorized URLs until a patch is available.

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2017-3164
GHSA-VRH8-27Q8-FR8F

Produtos afetados

Apache Solr
Debian