https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:34:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-04859 bdu:2019-04859 https://cve.radiocsirt.org/vuln/bdu:2019-04859 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2019-26390 cnvd-2019-26390 https://cve.radiocsirt.org/vuln/cnvd-2019-26390 https://cve.radiocsirt.org/vuln/euvd-2026-256195 EUVD-2026-256195 https://cve.radiocsirt.org/vuln/euvd-2026-256195 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0193 <p>In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request&#39;s &#34;dataConfig&#34; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property &#34;enable.dih.dataConfigParam&#34; to true.</p> <p>In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request&#39;s &#34;dataConfig&#34; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property &#34;enable.dih.dataConfigParam&#34; to true.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-0193 https://cve.radiocsirt.org/vuln/ghsa-3gm7-v7vw-866c <p><strong>Affected:</strong> Maven: org.apache.solr:solr-core</p> <p>In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request&#39;s &#34;dataConfig&#34; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property &#34;enable.dih.dataConfigParam&#34; to true.</p> <p><strong>Affected:</strong> Maven: org.apache.solr:solr-core</p> <p>In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request&#39;s &#34;dataConfig&#34; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property &#34;enable.dih.dataConfigParam&#34; to true.</p> https://cve.radiocsirt.org/vuln/ghsa-3gm7-v7vw-866c https://cve.radiocsirt.org/vuln/gsd-2019-0193 gsd-2019-0193 https://cve.radiocsirt.org/vuln/gsd-2019-0193 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0193 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr</p> <p>In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request&#39;s &#34;dataConfig&#34; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property &#34;enable.dih.dataConfigParam&#34; to true.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr</p> <p>In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request&#39;s &#34;dataConfig&#34; parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property &#34;enable.dih.dataConfigParam&#34; to true.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-0193