PT-2025-2921 · Apache · Apache Solr

Rry · Published 2025-01-26 · Updated 2026-04-12 · CVE-2024-52012

Positive Technologies (AI Summary)

CVSS v4.0

6.6

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Apache Solr versions 6.6 through 9.7.0

Description Apache Solr instances running on Windows are susceptible to arbitrary file path write access due to insufficient input validation in the 'configset upload' API. This is commonly known as a 'zipslip', where maliciously crafted ZIP files can utilize relative file paths to write data to unintended locations within the file system. The API endpoint involved is /configset upload. The vulnerability allows for arbitrary file writes through the manipulation of ZIP file contents.

Recommendations Upgrade to version 9.8.0 to resolve the issue. For users unable to upgrade, restrict access to the /configset upload API using Solr's "Rule-Based Authentication Plugin" to a trusted set of administrators and users.

Fix

RCE

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

BDU:2025-05248

BIT-SOLR-2024-52012

CVE-2024-52012

GHSA-4P5M-GVPF-F3X5

Affected Products

Apache Solr

References · 30

• https://bdu.fstec.ru/vul/2025-05248 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52012 · Security Note
• https://osv.dev/vulnerability/CVE-2024-52012 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-solr-2024-52012 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4p5m-gvpf-f3x5 · Vendor Advisory
• https://lists.apache.org/thread/yp39pgbv4vf1746pf5yblz84lv30vfxd · Vendor Advisory
• https://github.com/apache/solr · Note
• https://github.com/apache/solr/commit/5795edd143b8fcb2ffaf7f278a099b8678adf396 · Note
• https://twitter.com/TMJIntel/status/1884262913159962772 · Twitter Post
• http://openwall.com/lists/oss-security/2025/01/26/2 · Note
• https://twitter.com/VivekIntel/status/2042277281268380027 · Twitter Post
• https://t.me/pentestingnews/55722 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1sif2hj/top_10_trending_cves_11042026 · Reddit Post
• https://vuldb.com/?id.293478 · Note
• https://t.me/cvedetector/16447 · Telegram Post