https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:16:52 +0000 https://cve.radiocsirt.org/vuln/cve-2024-45217 <p><strong>Affected:</strong> Apache Software Foundation Apache Solr, apache_software_foundation apache_solr</p> <p>Insecure Default Initialization of Resource vulnerability in Apache Solr.</p> <p>New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the &#34;trusted&#34; metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to &#34;trusted&#34; ConfigSets that may not have been created with an Authenticated request. &#34;trusted&#34; ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated &amp; Authorized.</p> <p>This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization.</p> <p>Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Solr, apache_software_foundation apache_solr</p> <p>Insecure Default Initialization of Resource vulnerability in Apache Solr.</p> <p>New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the &#34;trusted&#34; metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to &#34;trusted&#34; ConfigSets that may not have been created with an Authenticated request. &#34;trusted&#34; ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated &amp; Authorized.</p> <p>This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization.</p> <p>Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.</p> https://cve.radiocsirt.org/vuln/cve-2024-45217