CVE-2017-3164

Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.

Affected

Apache Software Foundation · Apache Solr

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

19.44% chance of exploitation in the next 30 days, 97th percentile

Published

2019-03-08

Updated

2024-09-16

Proof-of-concept exploits (1)

• tdwyer/PoC_CVE-2017-3164_CVE-2017-12623★ · 2023-08-11

Security advisories

• http://mail-archives.apache.org/mod_mbox/www-announce/201902.mbox/%3CCAECwjAVjBN%3DwO5rYs…
• http://www.securityfocus.com/bid/107026
• https://security.netapp.com/advisory/ntap-20190327-0003
• advisories/GHSA-vrh8-27q8-fr8f
• https://www.oracle.com/security-alerts/cpuoct2020.html
• https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

References

• CVE Record
• NVD entry

Related

• CVE-2017-1262
• CVE-2017-12629
• CVE-2020-25705
• CVE-2020-8559