Unrestricted Upload of File with Dangerous Type Affecting org.apache.solr:solr-core package, versions [6.0.0,8.11.3) [9.0.0,9.4.1)
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGAPACHESOLR-6241715
- published 11 Feb 2024
- disclosed 9 Feb 2024
- credit L3yx
Introduced: 9 Feb 2024
CVE-2023-50386 Open this link in a new tabHow to fix?
Upgrade org.apache.solr:solr-core to version 8.11.3, 9.4.1 or higher.
Overview
org.apache.solr:solr-core is an open source enterprise search platform built on Apache Lucene
Affected versions of this package are vulnerable to Unrestricted Upload of File with Dangerous Type due to the ConfigSets API accepting Java jar and class files. When backing up Solr Collections, these configSet files are saved to disk using the LocalFileSystemRepository, which is the default for backups. If the backup was saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the jar and class files become available for use with any ConfigSet, regardless of trust level.
Note: This vulnerability is most severe when Authorization is not enabled, which is strongly recommended against. With Authorization enabled it is limited to extending the Backup permissions with the ability to add libraries.