Vulnerability in lucene-solr - security update
Summary
DLA-1046-1: lucene-solr - security update. Affects lucene-solr versions < 3.6.0+dfsg-1+deb7u2. Fixed in 3.6.0+dfsg-1+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Lucene-Solr is an open-source search platform built on Apache Lucene. It provides full-text search capabilities and is widely used for indexing and searching large volumes of data. The lucene-solr handler supports an HTTP API that allows users to interact with the platform. However, this API is vulnerable to a path traversal attack, which can be exploited by an attacker to download any file readable to the Solr server process, even if it is not related to the Solr index state.
Vulnerability Detail
The vulnerability in lucene-solr arises from the lack of validation of the user-specified file_name parameter in the /replication?command=filecontent&file=<file_name> API. This allows an attacker to traverse the file system and access sensitive files on the server. The impact of this vulnerability can be severe, as it enables unauthorized access to potentially confidential information or system files.
How To Fix
Minimum fixed version
3.6.0+dfsg-1+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade lucene-solrTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update to mitigate the risk effectively.
Conclusion
The vulnerability in lucene-solr exposes the platform to a path traversal attack, allowing unauthorized access to sensitive files. To mitigate this risk, it is crucial to upgrade the lucene-solr package to the recommended version. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for lucene-solr →
FAQ
Lucene-Solr is an open-source search platform built on Apache Lucene. It provides full-text search capabilities and is widely used for indexing and searching large volumes of data.
The vulnerability allows an attacker to download any file readable to the Solr server process, even if it is not related to the Solr index state. This can lead to unauthorized access to sensitive information or system files.
To fix this vulnerability, you should upgrade the lucene-solr package to version 3.6.0+dfsg-1+deb7u2 or later. This update includes the necessary validation checks to prevent path traversal attacks.
No, there is no known workaround for this vulnerability. It is crucial to apply the security update to mitigate the risk effectively.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for lucene-solr.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
