Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Apache Solr — Vulnerabilities & Security Advisories 29

All 29 CVE vulnerabilities found in Apache Solr, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive overview of security vulnerabilities affecting the Apache Solr search platform, categorized by Common Weakness Enumeration (CWE) types and associated Common Vulnerabilities and Exposures (CVE) identifiers. The content aggregates a wide spectrum of security flaws, ranging from critical remote code execution and privilege escalation issues to less severe information disclosures and denial of service conditions. These records encompass historical data spanning the product's major development cycles, ensuring coverage of both legacy versions still in use and recent updates. By visiting this resource, users can systematically track vendor advisories issued by the Apache Software Foundation to stay informed about remediation efforts and patch releases. The page also facilitates a deeper understanding of specific weakness classes, allowing developers to analyze recurring patterns in code defects that impact search infrastructure. Furthermore, individuals can look up a product's vulnerability history to assess risk exposure over time and prioritize security hygiene in their deployment environments. This centralized approach supports better decision-making for system administrators and security analysts who need to evaluate the overall security posture of Apache Solr instances within their networks. The information is structured to help technical teams correlate internal audit findings with external threat intelligence, thereby improving incident response times and reducing the window of exposure for known exploits.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-44825 Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users CWE-798 8.1 High2026-06-01
CVE-2026-22022 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin CWE-285 9.8AICriticalAI2026-01-21
CVE-2026-22444 Apache Solr: Insufficient file-access checking in standalone core-creation requests CWE-20 5.3AIMediumAI2026-01-21
CVE-2025-24814 Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files CWE-250 9.8 -2025-01-27
CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access CWE-23 7.7 -2025-01-27
CVE-2024-45217 Apache Solr: ConfigSets created during a backup restore command are trusted implicitly CWE-1188 8.8 -2024-10-16
CVE-2024-45216 Apache Solr: Authentication bypass possible using a fake URL Path ending CWE-287 9.8 -2024-10-16
CVE-2023-50291 Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords CWE-522 7.5 -2024-02-09
CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users CWE-732 9.8 -2024-02-09
CVE-2023-50298 Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions CWE-200 7.5 -2024-02-09
CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets CWE-434 9.8 -2024-02-09
CVE-2023-50290 Apache Solr: Host environment variables are published via the Metrics API CWE-200 7.5 -2024-01-15
CVE-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler CWE-40 8.8 -2021-12-23
CVE-2021-29943 Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections CWE-863 9.1 -2021-04-13
CVE-2021-29262 Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings CWE-522 7.5 -2021-04-13
CVE-2021-27905 SSRF vulnerability with the Replication handler CWE-918 9.1 -2021-04-13
CVE-2020-13957 Apache Solr 安全漏洞 9.8 -2020-10-13
CVE-2020-13941 Apache Solr 输入验证错误漏洞 8.8 -2020-08-17
CVE-2018-11802 Apache Solr 安全漏洞 7.1 -2020-04-01
CVE-2019-17558 Apache Solr 注入漏洞 7.5 -2019-12-30
CVE-2019-0193 Apache Solr 代码注入漏洞 7.2 -2019-08-01
CVE-2017-3164 Apache Solr 代码问题漏洞 6.5 -2019-03-08
CVE-2019-0192 Apache Solr 代码问题漏洞 9.8 -2019-03-07
CVE-2018-8026 Apache Solr 安全漏洞 6.5 -2018-07-05
CVE-2018-8010 Apache Solr 安全漏洞 5.5 -2018-05-21
CVE-2018-1308 Apache Solr DataImportHandler 安全漏洞 7.5 -2018-04-09
CVE-2017-9803 Apache Solr 授权问题漏洞 8.8 -2017-09-18
CVE-2017-3163 Apache Solr 安全漏洞 7.5 -2017-08-30
CVE-2017-7660 Apache Solr 安全漏洞 --2017-07-07

All 29 known CVE vulnerabilities affecting Apache Solr with full Chinese analysis, references, and POCs where available.