CVE-2019-0193: high-severity vulnerability in Apache Solr
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply updates per vendor instructions.
Apache Solr's DataImportHandler allows loading configuration from user requests, which can contain dangerous scripts. This creates a security hole where attackers could execute arbitrary code on the server.
CVE-2019-0193 affects Apache Solr's DataImportHandler module, which accepts DIH configuration via the 'dataConfig' request parameter. Since DIH configs support script execution, an unauthenticated remote attacker can inject malicious scripts through this parameter to achieve arbitrary code execution. Mitigation requires Java system property 'enable.dih.dataConfigParam' set to true (disabled by default in 8.2.0+).
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.