GitHub Advisoryadvisory · Maven

GHSA-7px3-6f6g-hxcj XML external entity expansion in org.apache.solr:solr-core

MEDIUM Published 2018-10-17 Modified 2024-03-04 Official page ↗
Aliases
CVE-2018-8026
Ecosystem
Maven
Packages
org.apache.solr:solr-core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-611
Reviewed
2020-06-16

Affected packages

• Maven org.apache.solr:solr-core: >= 7.0.0, < 7.4.0 → fixed in 7.4.0 • Maven org.apache.solr:solr-core: >= 6.0.0, < 6.6.5 → fixed in 6.6.5

Description

This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. The manipulated files can be uploaded as configsets using Solr's API, allowing to exploit that vulnerability.

Related

Alias · CVE (1)

  • CVE-2018-8026 This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files… vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References