https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:29:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08828 bdu:2024-08828 https://cve.radiocsirt.org/vuln/bdu:2024-08828 https://cve.radiocsirt.org/vuln/bit-solr-2024-45216 <p><strong>Affected:</strong> Bitnami: solr</p> <p>Improper Authentication vulnerability in Apache Solr.</p> <p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.</p> <p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p> <p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> <p><strong>Affected:</strong> Bitnami: solr</p> <p>Improper Authentication vulnerability in Apache Solr.</p> <p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.</p> <p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p> <p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> https://cve.radiocsirt.org/vuln/bit-solr-2024-45216 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/cnvd-2024-41664 cnvd-2024-41664 https://cve.radiocsirt.org/vuln/cnvd-2024-41664 https://cve.radiocsirt.org/vuln/euvd-2026-200249 EUVD-2026-200249 https://cve.radiocsirt.org/vuln/euvd-2026-200249 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45216 <p>Improper Authentication vulnerability in Apache Solr.</p> <p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.</p> <p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p> <p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> <p>Improper Authentication vulnerability in Apache Solr.</p> <p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.</p> <p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p> <p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45216 https://cve.radiocsirt.org/vuln/ghsa-mjvf-4h88-6xm3 <p><strong>Affected:</strong> Maven: org.apache.solr:solr</p> <p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.</p> <p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p> <p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.solr:solr</p> <p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.</p> <p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p> <p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-mjvf-4h88-6xm3 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45216 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr</p> <p>Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr</p> <p>Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-45216 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3186 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Solr ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Solr ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3186