CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-08-01
Apache Solr DataImportHandler Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2019-0193)
[Affected Scope] Apache Solr versions prior to 8.2.0 with the DataImportHandler (DIH) module enabled
[Impact] An authenticated attacker (or an attacker with admin access) can execute arbitrary system commands on the host server by sending a malicious DIH configuration
[Mitigation] Upgrade Apache Solr to version 8.2.0 or higher, or explicitly disable the 'enable.dih.dataConfigParam' Java system property