writeups.xyz / Apache Solr 8.3.1 RCE from exposed administration interface

Submitter : c2a

Date: 1 May 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Unrestricted File Upload
• XSLT Injection
• Path Traversal

Programs :

• Apache Solr

Authors :

• Nicolas Brunner

Link :
https://blog.scrt.ch/2023/05/01/solr-rce-from-exposed-administration-interface/