← CVE Intelligence

CVE-2017-3164

Apache Software Foundation / Apache Solr PUBLISHED

Description (CNA)

Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Solraffected Apache Solr 1.3.0 to 1.4.1, 3.1.0 to 3.6.2, 4.0.0 to 4.10.4, 5.0.0 to 5.5.5, 6.0.0 to 6.6.5, 7.0.0 to 7.6.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.