writeups.xyz / Compromising an unreachable Solr server with CVE-2013-6397

Submitter : c2a

Date: 27 November 2013

Bounty : undisclosed

Vulnerabilities :

• XXE
• Path Traversal
• XSLT Injection
• RCE

Programs :

• Apache Solr

Authors :

• Nicolas Grégoire (@Agarri_FR)

Link :
https://www.agarri.fr/blog/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html