VDB
Sign up
MEDIUM

GHSA-4p5m-gvpf-f3x5

Apache Solr Relative Path Traversal vulnerability

Quick fix

GHSA-4p5m-gvpf-f3x5 — org.apache.solr:solr-core: upgrade to the fixed version with the command below.

# pom.xml: bump <version>9.8.0</version> for org.apache.solr:solr-core

Details

Relative Path Traversal vulnerability in Apache Solr.

Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API.  Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.   This issue affects Apache Solr: from 6.6 through 9.7.0.

Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr's "Rule-Based Authentication Plugin" to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/org.apache.solr:solr-core
Introduced in: 6.6Fixed in: 9.8.0
Fix# pom.xml: bump <version>9.8.0</version> for org.apache.solr:solr-core

References