CVE-2017-12629: Remote Code Execution in Apache Solr
Summary
CVE-2017-12629: Remote code execution occurs in Apache Solr. Affects org.apache.solr:solr-core across 3 version ranges.
>= 5.5.0, < 5.5.5
>= 6.0.0, < 6.6.2
>= 7.0.0, < 7.1.0
Fixed in 5.5.5, 6.6.2 or 7.1.0, depending on the release line you run. How to fix ↓
Also tracked for
- lucene-solr · Debian:11
The same CVE-2017-12629 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Solr is an open-source search platform built on Apache Lucene. It provides full-text search, faceted search, and indexing capabilities. Solr is widely used in various applications for efficient and scalable search functionality. However, versions 5.5.5, 6.6.2, and 7.1.0 of Apache Solr are vulnerable to remote code execution.
Vulnerability Detail
The vulnerability in Apache Solr is due to XML external entity expansion (XXE) in the XML Query Parser. By exploiting this vulnerability, an attacker can upload malicious data to the '/upload' request handler or perform blind XXE attacks using the FTP wrapper to read arbitrary local files from the Solr server. Additionally, the Config API add-listener command can be abused to reach the RunExecutableListener class, enabling remote code execution. Elasticsearch, which also uses Lucene, is not affected by this vulnerability.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 5.5.0, < 5.5.55.5.5 -
>= 6.0.0, < 6.6.26.6.2 -
>= 7.0.0, < 7.1.07.1.0
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the recommended fix by upgrading to a patched version of Apache Solr.
Conclusion
Apache Solr versions 5.5.5, 6.6.2, and 7.1.0 are vulnerable to remote code execution. It is crucial to upgrade to a patched version of Solr to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.solr:solr-core →
FAQ
Apache Solr is an open-source search platform built on Apache Lucene. It provides advanced search capabilities and is widely used in various applications.
Versions 5.5.5, 6.6.2, and 7.1.0 of Apache Solr are vulnerable to remote code execution.
Yes, this vulnerability can be exploited remotely by sending malicious requests to the affected Solr server.
No, Elasticsearch is not affected by this vulnerability. Although it uses Lucene, it does not have the same XXE vulnerability in the XML Query Parser.
No, there are no known workarounds. It is recommended to upgrade to a fixed version of Apache Solr.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.solr:solr-core.
