cyfenced.com →

[ CVE-2019-0193 · Published 1 Aug 2019 ]

Apache Solr DataImportHandler Code Injection Vulnerability

Exploited · CISA KEV CVSS 7.2 EPSS 84%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2021-12-10
  • EPSS: 84% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.

CISA: The optional Apache Solr module DataImportHandler contains a code injection vulnerability.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 10 Jun 2022): Apply updates per vendor instructions.

[ References ]References