Most recent entries from all

Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 05:20:20 +0000 BIT-solr-2021-27905 — SSRF vulnerability with the Replication handler https://cve.radiocsirt.org/vuln/bit-solr-2021-27905 <p><strong>Affected:</strong> Bitnami: solr</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> <p><strong>Affected:</strong> Bitnami: solr</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> https://cve.radiocsirt.org/vuln/bit-solr-2021-27905 cnvd-2021-27717 https://cve.radiocsirt.org/vuln/cnvd-2021-27717 cnvd-2021-27717 https://cve.radiocsirt.org/vuln/cnvd-2021-27717 EUVD-2026-25744 https://cve.radiocsirt.org/vuln/euvd-2026-25744 EUVD-2026-25744 https://cve.radiocsirt.org/vuln/euvd-2026-25744 fkie_cve-2021-27905 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27905 <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27905 GHSA-5phw-3jrp-3vj8 — Server-Side Request Forgery in Apache Solr https://cve.radiocsirt.org/vuln/ghsa-5phw-3jrp-3vj8 <p><strong>Affected:</strong> Maven: org.apache.solr:solr-parent</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> <p><strong>Affected:</strong> Maven: org.apache.solr:solr-parent</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> https://cve.radiocsirt.org/vuln/ghsa-5phw-3jrp-3vj8 gsd-2021-27905 https://cve.radiocsirt.org/vuln/gsd-2021-27905 gsd-2021-27905 https://cve.radiocsirt.org/vuln/gsd-2021-27905 UBUNTU-CVE-2021-27905 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27905 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lucene-solr, Ubuntu:Pro:16.04:LTS: lucene-solr, Ubuntu:Pro:18.04:LTS: lucene-solr, Ubuntu:20.04:LTS: lucene-solr, Ubuntu:22.04:LTS: lucene-solr, Ubuntu:24.04:LTS: lucene-solr, Ubuntu:25.10: lucene-solr, Ubuntu:26.10: lucene-solr, Ubuntu:26.04:LTS: lucene-solr</p> <p>The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27905