CVE-2018-8010: XML External Entity Expansion (XXE) Vulnerability in Apache Solr
Summary
CVE-2018-8010: There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files. Affects org.apache.solr:solr-core across 2 version ranges.
>= 6.6.0, < 6.6.4
>= 7.0.0, < 7.3.1
Fixed in 6.6.4 or 7.3.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Solr is an open-source search platform built on Apache Lucene. It provides full-text search, faceted search, and distributed search capabilities. Solr config files, such as solrconfig.xml, schema.xml, and managed-schema, are used to configure the behavior of Solr. These files are accessible through the APIs and can be modified to customize the search functionality.
Vulnerability Detail
The XML external entity expansion (XXE) vulnerability in Apache Solr versions 6.0.0 to 6.6.3 and 7.0.0 to 7.3.0 allows an attacker to exploit the XInclude functionality provided in the config files. By using file/ftp/http protocols, an attacker can read arbitrary local files from the Solr server or the internal network. This can lead to unauthorized access to sensitive information. The vulnerability can be mitigated by upgrading to Solr 6.6.4 or Solr 7.3.1 releases, which restrict the usage of external entities and XIncludes to local files or zookeeper resources within the Solr instance directory.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 6.6.0, < 6.6.46.6.4 -
>= 7.0.0, < 7.3.17.3.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround for this vulnerability. Upgrading to the patched versions is the recommended solution.
Conclusion
The XML external entity expansion (XXE) vulnerability in Apache Solr can be exploited to read arbitrary local files from the server or internal network. Upgrading to the patched versions, Solr 6.6.4 or 7.3.1, is recommended to mitigate this vulnerability. No additional steps are required after the upgrade. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for org.apache.solr:solr-core →
FAQ
Apache Solr is an open-source search platform built on Apache Lucene. It provides powerful search capabilities for applications and websites.
Solr config files, such as solrconfig.xml, schema.xml, and managed-schema, are used to configure the behavior of Solr. They define how documents are indexed, how searches are performed, and other search-related settings.
An XML external entity expansion vulnerability allows an attacker to read arbitrary files from the server or internal network by exploiting the XInclude functionality in XML parsing. In the case of Apache Solr, this vulnerability can be used to access sensitive files on the server.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the pom.xml file.
Yes, upgrading to Apache Solr versions 6.6.4 or 7.3.1 will fix the XXE vulnerability. These releases restrict the usage of external entities and XIncludes to local files or zookeeper resources within the Solr instance directory.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.solr:solr-core.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.