https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 08:37:57 +0000 https://cve.radiocsirt.org/vuln/bit-solr-2020-13957 <p><strong>Affected:</strong> Bitnami: solr</p> <p>Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that&#39;s uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.</p> <p><strong>Affected:</strong> Bitnami: solr</p> <p>Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that&#39;s uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.</p> https://cve.radiocsirt.org/vuln/bit-solr-2020-13957 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0556 https://cve.radiocsirt.org/vuln/cnvd-2020-57571 cnvd-2020-57571 https://cve.radiocsirt.org/vuln/cnvd-2020-57571 https://cve.radiocsirt.org/vuln/euvd-2026-42102 EUVD-2026-42102 https://cve.radiocsirt.org/vuln/euvd-2026-42102 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13957 <p>Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that&#39;s uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.</p> <p>Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that&#39;s uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13957 https://cve.radiocsirt.org/vuln/ghsa-3c7p-vv5r-cmr5 <p><strong>Affected:</strong> Maven: org.apache.solr:solr-parent, Maven: org.apache.solr:solr-solrj, Maven: org.apache.solr:solr-core</p> <p>Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that&#39;s uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions. This issue is patched in 8.6.3.</p> <p><strong>Affected:</strong> Maven: org.apache.solr:solr-parent, Maven: org.apache.solr:solr-solrj, Maven: org.apache.solr:solr-core</p> <p>Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that&#39;s uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions. This issue is patched in 8.6.3.</p> https://cve.radiocsirt.org/vuln/ghsa-3c7p-vv5r-cmr5 https://cve.radiocsirt.org/vuln/gsd-2020-13957 gsd-2020-13957 https://cve.radiocsirt.org/vuln/gsd-2020-13957