>= 5.0.0, < 8.4.0
from 0, < 8.2.0
>= 6.6.0, < 8.6.3
CRITICAL9.8Unrestricted upload of file with dangerous type in Apache Solr
>= 8.1.1, < 8.3.0
CRITICAL9.8Critical severity vulnerability that affects org.apache.solr:solr-core
>= 5.0.0, < 7.0.0
CRITICAL9.8lucene-solr - security update
>= 7.0.0, < 7.1.0
HIGH8.8Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
>= 6.0.0, < 8.11.3
HIGH8.2Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
>= 5.3.0, < 9.10.1
HIGH8.1Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
>= 9.4.0, <= 9.10.1
HIGH7.5Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords
>= 6.0.0, < 8.11.3
HIGH7.5Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users
>= 9.0.0, < 9.3.0
HIGH7.5Apache Solr vulnerable to XML Bomb
from 0, < 5.0.0
HIGH7.5Apache Solr insecure inter-node communication
>= 5.3.0, < 5.5.5
HIGH7.5Apache Solr Kerberos delegation token functionality flaws
>= 6.2.0, < 6.6.1
HIGH7.5Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings
from 0, < 8.8.2
HIGH7.5Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
>= 1.3.0, < 7.7.0
HIGH7.5lucene-solr - security update
from 0, < 5.5.4
HIGH7.5lucene-solr - security update
>= 1.2, < 6.6.3
HIGH7.1Apache Solr: Insufficient file-access checking in standalone core-creation requests
>= 8.6.0, < 9.10.1
MEDIUM6.5Apache Solr: Host environment variables are published via the Metrics API
>= 9.0.0, < 9.3.0
MEDIUM6.1Improper Neutralization of Input During Web Page Generation in Apache Solr
from 0, < 5.1.0
MEDIUM6.1Improper Neutralization of Input During Web Page Generation in Apache Solr
from 0, < 5.3.1
MEDIUM5.5Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files
from 0, < 9.8.0
MEDIUM5.5There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
>= 6.6.0, < 6.6.4
MEDIUM5.5XML external entity expansion in org.apache.solr:solr-core
>= 7.0.0, < 7.4.0
MEDIUM5.4Apache Solr: Configset upload on Windows allows arbitrary path write-access
>= 6.6, < 9.8.0
MEDIUM4.3Incorrect Authorization in Apache Solr
>= 7.0.0, < 7.7.0
—lucene-solr - security update
from 0, < 4.1.0
—XML Injection in Apache Solr
from 0, < 4.3.1
—Apache Solr UpdateRequestHandler for XML resolves XML External Entities
from 0, < 4.1.0
—Improper Limitation of a Pathname to a Restricted Directory in Apache Solr
from 0, < 4.6.0