Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-0193 PoC — Apache Solr 代码注入漏洞

Source
https://github.com/xConsoIe/CVE-2019-0193
Associated Vulnerability
Title:Apache Solr 代码注入漏洞 (CVE-2019-0193)
Description:In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.
Readme
# CVE-2019-0193

- Remote Code Execution
File Snapshot

 [4.0K]  /data/pocs/d7c9b0a22f2b5b298ae7f8cdf1a7720b815d8647
├── [  41]  README.md
└── [4.5K]  start.py

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →