lucene-solr vulnerabilities (Debian)

17 vulnerabilities.

• lucene-solr Debian Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files CVE-2025-24814 Fix available 5.5 MediumJanuary 27, 2025
• lucene-solr Debian Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords CVE-2023-50291 Fix available 7.5 HighFebruary 9, 2024
• lucene-solr Debian Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users CVE-2023-50292 Fix available 7.5 HighFebruary 9, 2024
• lucene-solr Debian Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions CVE-2023-50298 Fix available 7.5 HighFebruary 9, 2024
• lucene-solr Debian Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets CVE-2023-50386 Public exploitFix available EPSS 83.7% 8.8 HighFebruary 9, 2024
• lucene-solr Debian SSRF vulnerability with the Replication handler CVE-2021-27905 Public exploitFix available EPSS 93.1% 9.8 CriticalApril 13, 2021
• lucene-solr Debian Improper Input Validation in Apache Solr CVE-2020-13941 Public exploitFix available 8.8 HighAugust 17, 2020
• lucene-solr Debian Improper Input Validation in Apache Solr CVE-2019-17558 In KEVPublic exploitFix available EPSS 98.6% 7.5 HighDecember 30, 2019
• lucene-solr Debian XML External Entity (XXE) Injection in Apache Solr CVE-2019-0193 In KEVPublic exploitFix available EPSS 83.5% 7.2 HighAugust 1, 2019
• lucene-solr Debian Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core CVE-2017-3164 Public exploitFix available EPSS 19.4% 7.5 HighMarch 8, 2019
• lucene-solr Debian There is a XML external entity expansion (XXE) vulnerability in Apache Solr CVE-2018-1308 Fix available EPSS 20.8% 7.5 HighApril 9, 2018
• lucene-solr Debian Remote code execution occurs in Apache Solr CVE-2017-12629 Public exploitFix available EPSS 91.9% 9.8 CriticalOctober 14, 2017
• lucene-solr Debian Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core CVE-2017-3163 Fix available 7.5 HighJuly 30, 2017
• lucene-solr Debian Improper Restriction of XML External Entity Reference in Apache Solr CVE-2012-6612 Fix available EPSS 10.1% 7.5 HighDecember 7, 2013
• lucene-solr Debian XML Injection in Apache Solr CVE-2013-6408 Fix available EPSS 11.4% 6.4 MediumDecember 7, 2013
• lucene-solr Debian Apache Solr UpdateRequestHandler for XML resolves XML External Entities CVE-2013-6407 Fix available EPSS 11.4% 6.4 MediumDecember 7, 2013
• lucene-solr Debian Improper Limitation of a Pathname to a Restricted Directory in Apache Solr CVE-2013-6397 Fix available EPSS 56.5% 4.3 MediumDecember 7, 2013