CVE-2021-44548: Apache Solr Improper Input Validation and Path Traversal
Summary
CVE-2021-44548: Apache Solr Improper Input Validation and Path Traversal. Affects org.apache.solr:solr-parent versions < 8.11.1. Fixed in 8.11.1. How to fix ↓
Also tracked for
- solr · Bitnami
The same CVE-2021-44548 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Solr is an open-source search platform built on Apache Lucene. It provides full-text search, faceted search, and indexing capabilities for various types of data. Solr is widely used in enterprise applications for efficient and scalable search functionality. However, a vulnerability has been discovered in the DataImportHandler component of Apache Solr.
Vulnerability Detail
The vulnerability in Apache Solr allows an attacker to exploit improper input validation and perform path traversal attacks. By providing a Windows UNC path, the attacker can trigger an SMB network call from the Solr host to another host on the network. If the attacker has broader network access, this can lead to various SMB attacks, including the exfiltration of sensitive data such as user hashes and potential remote code execution. It's important to note that this vulnerability only affects Windows systems. The vulnerability has been assigned a CVSS score of 9.8, indicating its critical severity.
How To Fix
Minimum fixed version
8.11.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the DataImportHandler component in Apache Solr. This can be achieved by modifying the Solr configuration file and commenting out or removing the relevant configuration entries for DataImportHandler. However, this workaround may impact the functionality of certain features that rely on DataImportHandler, so upgrading to the fixed version is the recommended solution.
Conclusion
The vulnerability in Apache Solr's DataImportHandler component poses a significant risk to Windows systems. It is crucial to upgrade to version 8.11.1 or later to mitigate this vulnerability. Disabling the DataImportHandler component can serve as a temporary workaround, but it may impact certain features. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.solr:solr-parent →
FAQ
Apache Solr is an open-source search platform that provides full-text search, faceted search, and indexing capabilities for various types of data.
The vulnerability allows an attacker to perform SMB attacks, potentially leading to the exfiltration of sensitive data or even remote code execution on misconfigured systems.
All versions of Apache Solr prior to 8.11.1 are affected by this vulnerability.
No, this vulnerability only affects Windows systems.
The CVSS score of this vulnerability is 9.8, indicating its critical severity.
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.solr:solr-parent.
