{"id":"CVE-2019-0193","aliases":["CLSA-2026-1790616173","DEBIAN-CVE-2019-0193","DLA-1954-1","DLA-2327-1","EUVD-2019-0615","GHSA-3gm7-v7vw-866c","UBUNTU-CVE-2019-0193","USN-7283-1"],"status":"published","title":"XML External Entity (XXE) Injection in Apache Solr","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.83547,"percentile":0.99688,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-94"],"published":"2019-08-01T13:48:40Z","modified":"2026-11-02T19:46:24Z","kev":{"date_added":"2021-12-10","due_date":"2022-06-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-12-10"},{"source":"kev","since":"2021-12-10"}],"exploits":[{"source":"pocgithub","id":"xConsoIe/CVE-2019-0193","title":"xConsoIe/CVE-2019-0193","date":"2019-03-18","url":"https://github.com/xConsoIe/CVE-2019-0193"},{"source":"pocgithub","id":"jas502n/CVE-2019-0193","title":"jas502n/CVE-2019-0193","date":"2019-08-09","url":"https://github.com/jas502n/CVE-2019-0193"},{"source":"pocgithub","id":"1135/solr_exploit","title":"1135/solr_exploit","date":"2019-08-12","url":"https://github.com/1135/solr_exploit"},{"source":"pocgithub","id":"jaychouzzk/CVE-2019-0193-exp","title":"jaychouzzk/CVE-2019-0193-exp","date":"2019-09-03","url":"https://github.com/jaychouzzk/CVE-2019-0193-exp"},{"source":"pocgithub","id":"freeFV/ApacheSolrRCE","title":"freeFV/ApacheSolrRCE","date":"2022-09-13","url":"https://github.com/freeFV/ApacheSolrRCE"},{"source":"nuclei","id":"CVE-2019-0193","title":"Apache Solr DataImportHandler \u003c8.2.0 - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0193.yaml"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.solr:solr-core","fixed_in":["8.2.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"lucene-solr","fixed_in":["3.6.2+dfsg-22"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lucene-solr","fixed_in":["3.6.2+dfsg-22"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lucene-solr","fixed_in":["3.6.2+dfsg-22"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"lucene-solr","fixed_in":["3.6.2+dfsg-5+deb8u3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"lucene-solr","fixed_in":["3.6.2+dfsg-10+deb9u3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lucene-solr","fixed_in":["3.6.2+dfsg-2ubuntu0.1~esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"lucene-solr","fixed_in":["3.6.2+dfsg-8ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"lucene-solr","fixed_in":["3.6.2+dfsg-18~18.04.1~esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.5"},{"fixed":"5.5.5-tuxcare.3"}]}],"versions":["5.5.5","5.5.5-tuxcare.1","5.5.5-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-22"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-22"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-22"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-5+deb8u3"}]}],"versions":["3.6.2+dfsg-5","3.6.2+dfsg-5+deb8u1","3.6.2+dfsg-5+deb8u2"]},{"source":"osv","ecosystem":"Debian:9","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-10+deb9u3"}]}],"versions":["3.6.2+dfsg-10","3.6.2+dfsg-10+deb9u1","3.6.2+dfsg-10+deb9u2"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0"}]}],"versions":["1.3.0","1.4.0","1.4.1","3.1.0","3.2.0","3.3.0","3.4.0","3.5.0","3.6.0","3.6.1","3.6.2","4.0.0","4.0.0-ALPHA","4.0.0-BETA","4.1.0","4.10.0","4.10.1","4.10.2","4.10.3","4.10.4","4.2.0","4.2.1","4.3.0","4.3.1","4.4.0","4.5.0","4.5.1","4.6.0","4.6.1","4.7.0","4.7.1","4.7.2","4.8.0","4.8.1","4.9.0","4.9.1","5.0.0","5.1.0","5.2.0","5.2.1","5.3.0","5.3.1","5.3.2","5.4.0","5.4.1","5.5.0","5.5.1","5.5.2","5.5.3","5.5.4","5.5.5","6.0.0","6.0.1","6.1.0","6.2.0","6.2.1","6.3.0","6.4.0","6.4.1","6.4.2","6.5.0","6.5.1","6.6.0","6.6.1","6.6.2","6.6.3","6.6.4","6.6.5","6.6.6","7.0.0","7.0.1","7.1.0","7.2.0","7.2.1","7.3.0","7.3.1","7.4.0","7.5.0","7.6.0","7.7.0","7.7.1","7.7.2","7.7.3","8.0.0","8.1.0","8.1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-2ubuntu0.1~esm4"}]}],"versions":["3.6.2+dfsg-1","3.6.2+dfsg-2","3.6.2+dfsg-2ubuntu0.1~esm1","3.6.2+dfsg-2ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-8ubuntu0.1+esm1"}]}],"versions":["3.6.2+dfsg-7","3.6.2+dfsg-8","3.6.2+dfsg-8ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-18~18.04.1~esm2"}]}],"versions":["3.6.2+dfsg-10","3.6.2+dfsg-11","3.6.2+dfsg-18~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-2ubuntu0.1~esm4"}]}],"versions":["3.6.2+dfsg-1","3.6.2+dfsg-2","3.6.2+dfsg-2ubuntu0.1~esm1","3.6.2+dfsg-2ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-8ubuntu0.1+esm1"}]}],"versions":["3.6.2+dfsg-7","3.6.2+dfsg-8","3.6.2+dfsg-8ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-18~18.04.1~esm2"}]}],"versions":["3.6.2+dfsg-10","3.6.2+dfsg-11","3.6.2+dfsg-18~18.04"]}],"products":[{"vendor":"apache","product":"apache solr"},{"vendor":"apache","product":"solr"},{"vendor":"apache software foundation","product":"apache solr"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://issues.apache.org/jira/browse/SOLR-13669","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00013.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/7143983363f0ba463475be4a8b775077070a08dbf075449b7beb51ee%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/42cc4d334ba33905b872a0aa00d6a481391951c8b1450f01b077ce74%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/6f2d61bd8732224c5fd3bdd84798f8e01e4542d3ee2f527a52a81b83%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/1addbb49a1fc0947fb32ca663d76d93cfaade35a4848a76d4b4ded9c%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/a6e3c09dba52b86d3a1273f82425973e1b0623c415d0e4f121d89eab%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","fix","web"]},{"url":"https://lists.apache.org/thread.html/55880d48e38ba9e8c41a3b9e41051dbfdef63b86b0cfeb32967edf03%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/e85f735fad06a0fb46e74b7e6e9ce7ded20b59637cd9f993310f814d%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/9b0e7a7e3e18d0724f511403b364fc082ff56e3134d84cfece1c82fc%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","fix","web"]},{"url":"https://lists.apache.org/thread.html/r339865b276614661770c909be1dd7e862232e3ef0af98bfd85686b51%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Issue Tracking","Mailing List","report","web"]},{"url":"https://lists.apache.org/thread.html/r19d23e8640236a3058b4d6c23e5cd663fde182255f5a9d63e0606a66%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Issue Tracking","Mailing List","report","web"]},{"url":"https://lists.apache.org/thread.html/r33aed7ad4ee9833c4190a44e2b106efd2deb19504b85e012175540f6%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/rb34d820c21f1708c351f9035d6bc7daf80bfb6ef99b34f7af1d2f699%40%3Cissues.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rc400db37710ee79378b6c52de3640493ff538c2beb41cefdbbdf2ab8%40%3Ccommits.submarine.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Issue Tracking","Mailing List","report","web"]},{"url":"https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc%40%3Cusers.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314%40%3Cusers.solr.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article","web"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0193","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0193","tags":["advisory"]},{"url":"https://github.com/apache/lucene-solr/commit/02c693f3713add1b4891cbaa87127de3a55c10f7","tags":["web"]},{"url":"https://lists.apache.org/thread.html/1addbb49a1fc0947fb32ca663d76d93cfaade35a4848a76d4b4ded9c@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/42cc4d334ba33905b872a0aa00d6a481391951c8b1450f01b077ce74@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/55880d48e38ba9e8c41a3b9e41051dbfdef63b86b0cfeb32967edf03@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/6f2d61bd8732224c5fd3bdd84798f8e01e4542d3ee2f527a52a81b83@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/7143983363f0ba463475be4a8b775077070a08dbf075449b7beb51ee@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/9b0e7a7e3e18d0724f511403b364fc082ff56e3134d84cfece1c82fc@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/a6e3c09dba52b86d3a1273f82425973e1b0623c415d0e4f121d89eab@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@%3Ccommits.nifi.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/e85f735fad06a0fb46e74b7e6e9ce7ded20b59637cd9f993310f814d@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r19d23e8640236a3058b4d6c23e5cd663fde182255f5a9d63e0606a66@%3Cdev.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r339865b276614661770c909be1dd7e862232e3ef0af98bfd85686b51@%3Cdev.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r33aed7ad4ee9833c4190a44e2b106efd2deb19504b85e012175540f6@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rb34d820c21f1708c351f9035d6bc7daf80bfb6ef99b34f7af1d2f699@%3Cissues.lucene.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@%3Ccommits.nifi.apache.org%3E","tags":["web"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESOLR-536063","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc400db37710ee79378b6c52de3640493ff538c2beb41cefdbbdf2ab8@%3Ccommits.submarine.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc@%3Cusers.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef@%3Cusers.solr.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314@%3Cusers.solr.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3gm7-v7vw-866c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-0193","tags":["advisory"]},{"url":"https://github.com/apache/lucene-solr","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2019-0193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-0193","tags":["report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7283-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-0193","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T13:48:40Z","modified":"2025-10-21T23:45:32.477Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-0615","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T13:48:40Z","modified":"2025-10-21T23:45:32Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2021-12-10","updated_at":"2026-11-02T20:31:24.172282Z"}],"ghsa":[{"id":"GHSA-3gm7-v7vw-866c","title":"XML External Entity (XXE) Injection in Apache Solr","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T19:17:35Z","modified":"2025-10-22T17:44:26Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:39:02.474737Z"}],"kev":[{"id":"CVE-2019-0193","title":"Apache Solr DataImportHandler Code Injection Vulnerability","description":"The optional Apache Solr module DataImportHandler contains a code injection vulnerability.","cwes":["CWE-94"],"kev":{"date_added":"2021-12-10","due_date":"2022-06-10","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2019-0193","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T14:15:13.113Z","modified":"2026-06-17T02:07:55.447Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:05:21.892729Z"}],"osv":[{"id":"CVE-2019-0193","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T14:15:13.113Z","modified":"2026-10-24T10:30:44.010272981Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2019-0193","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T14:15:13.113Z","modified":"2026-09-21T07:00:14.557852276Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"GHSA-3gm7-v7vw-866c","title":"XML External Entity (XXE) Injection in Apache Solr","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T19:17:35Z","modified":"2025-10-22T19:31:54.544665Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:35.747385Z"},{"id":"UBUNTU-CVE-2019-0193","description":"In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property \"enable.dih.dataConfigParam\" to true.","status":"published","published":"2019-08-01T14:15:00Z","modified":"2026-02-04T04:17:07.59834Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.2,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"CLSA-2026-1790616173","title":"TuxCare security update for org.apache.solr:solr-core (4 CVEs)","description":"TuxCare rebuilt org.apache.solr:solr-core to address 4 CVEs. Fixed in 5.5.5-tuxcare.3.","status":"published","published":"2026-09-28T17:22:53Z","modified":"2026-11-02T19:46:24.62261823Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"DLA-1954-1","title":"lucene-solr - security update","status":"published","published":"2019-10-10T00:00:00Z","modified":"2026-03-09T01:20:09.47276Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2327-1","title":"lucene-solr - security update","status":"published","published":"2020-08-15T00:00:00Z","modified":"2026-03-09T01:18:07.89652Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"USN-7283-1","title":"lucene-solr vulnerability","description":"It was discovered that the Apache Solr DataImportHandler module incorrectly\nhandled certain request parameters in a default configuration. A remote\nattacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2025-02-21T00:13:56Z","modified":"2026-06-25T13:32:30.224232128Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}