CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-12-30
Apache Solr Velocity Template Injection Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2019-17558)
[Affected Scope] Apache Solr versions 5.0.0 through 8.3.1
[Impact] Remote attackers can modify Solr configurations via the Config API to enable the Velocity template loader and execute arbitrary system commands on the host
[Mitigation] Upgrade to Apache Solr 8.4.0 or later, or disable the 'params.resource.loader.enabled' setting and restrict access to the Config API