Homepage

Directory Traversal Affecting lucene-solr package, versions *

Severity

 Recommended
medium

Based on Ubuntu security rating.

Threat Intelligence

EPSS
0.52% (77th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Directory Traversal vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-UBUNTU1604-LUCENESOLR-330373
  • published30 Aug 2017
  • disclosed30 Aug 2017
Report a new vulnerability Found a mistake?

Introduced: 30 Aug 2017

CVE-2017-3163  (opens in a new tab)
CWE-22  (opens in a new tab)

How to fix?

There is no fixed version for Ubuntu:16.04 lucene-solr.

NVD Description

Note: Versions mentioned in the description apply only to the upstream lucene-solr package and not the lucene-solr package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.