https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:30:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05248 bdu:2025-05248 https://cve.radiocsirt.org/vuln/bdu:2025-05248 https://cve.radiocsirt.org/vuln/bit-solr-2024-52012 <p><strong>Affected:</strong> Bitnami: solr</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> <p><strong>Affected:</strong> Bitnami: solr</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> https://cve.radiocsirt.org/vuln/bit-solr-2024-52012 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/euvd-2026-213999 EUVD-2026-213999 https://cve.radiocsirt.org/vuln/euvd-2026-213999 https://cve.radiocsirt.org/vuln/fkie_cve-2024-52012 <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-52012 https://cve.radiocsirt.org/vuln/ghsa-4p5m-gvpf-f3x5 <p><strong>Affected:</strong> Maven: org.apache.solr:solr-core</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> <p><strong>Affected:</strong> Maven: org.apache.solr:solr-core</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> https://cve.radiocsirt.org/vuln/ghsa-4p5m-gvpf-f3x5 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0197 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Solr ausnutzen, um Dateien zu manipulieren oder seine Rechte zu erweitern.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Solr ausnutzen, um Dateien zu manipulieren oder seine Rechte zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0197