https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:52:01 +0000 https://cve.radiocsirt.org/vuln/cve-2024-52012 <p><strong>Affected:</strong> Apache Software Foundation Apache Solr</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Solr</p> <p>Relative Path Traversal vulnerability in Apache Solr.</p> <p>Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the &#34;configset upload&#34; API.  Commonly known as a &#34;zipslip&#34;, maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.</p> <p>Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr&#39;s &#34;Rule-Based Authentication Plugin&#34; to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.</p> https://cve.radiocsirt.org/vuln/cve-2024-52012