solr vulnerabilities (Bitnami)

23 vulnerabilities.

• solr Bitnami Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users CVE-2026-44825 Public exploitFix available 8.1 HighJune 1, 2026
• solr Bitnami Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin CVE-2026-22022 Fix available 8.2 HighJanuary 21, 2026
• solr Bitnami Apache Solr: Insufficient file-access checking in standalone core-creation requests CVE-2026-22444 Public exploitFix available 7.1 HighJanuary 21, 2026
• solr Bitnami Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files CVE-2025-24814 Fix available 5.5 MediumJanuary 27, 2025
• solr Bitnami Apache Solr: Configset upload on Windows allows arbitrary path write-access CVE-2024-52012 Fix available EPSS 47.1% 5.4 MediumJanuary 27, 2025
• solr Bitnami Apache Solr: ConfigSets created during a backup restore command are trusted implicitly CVE-2024-45217 Fix available 8.1 HighOctober 16, 2024
• solr Bitnami Apache Solr: Authentication bypass possible using a fake URL Path ending CVE-2024-45216 Public exploitFix available EPSS 92.7% 9.8 CriticalOctober 16, 2024
• solr Bitnami Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords CVE-2023-50291 Fix available 7.5 HighFebruary 9, 2024
• solr Bitnami Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users CVE-2023-50292 Fix available 7.5 HighFebruary 9, 2024
• solr Bitnami Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions CVE-2023-50298 Fix available 7.5 HighFebruary 9, 2024
• solr Bitnami Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets CVE-2023-50386 Public exploitFix available EPSS 83.7% 8.8 HighFebruary 9, 2024
• solr Bitnami Apache Solr: Host environment variables are published via the Metrics API CVE-2023-50290 Public exploitFix available EPSS 68.4% 6.5 MediumJanuary 15, 2024
• solr Bitnami Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• solr Bitnami Apache Solr information disclosure vulnerability through DataImportHandler CVE-2021-44548 Fix available 9.8 CriticalDecember 23, 2021
• solr Bitnami XML External Entity (XXE) Injection in JDOM CVE-2021-33813 Fix available EPSS 19.4% 7.5 HighJune 16, 2021
• solr Bitnami Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections CVE-2021-29943 Fix available 9.1 CriticalApril 13, 2021
• solr Bitnami Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings CVE-2021-29262 Fix available 7.5 HighApril 13, 2021
• solr Bitnami SSRF vulnerability with the Replication handler CVE-2021-27905 Public exploitFix available EPSS 93.1% 9.8 CriticalApril 13, 2021
• solr Bitnami Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• solr Bitnami DOS vulnerability for Quoted Quality CSV headers CVE-2020-27223 Public exploitFix available EPSS 78.0% 5.2 MediumFebruary 26, 2021
• solr Bitnami Improper Privilege Management in Apache Hadoop CVE-2020-9492 Fix available 8.8 HighJanuary 26, 2021
• solr Bitnami Incorrect Authorization in Apache Solr CVE-2020-13957 Public exploitFix available EPSS 79.3% 9.8 CriticalOctober 13, 2020
• solr Bitnami Improper Input Validation in Apache Solr CVE-2020-13941 Public exploitFix available 8.8 HighAugust 17, 2020