Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem. This issue affects Apache Solr: from 6.6 through 9.7.0. Users are recommended to upgrade to version 9.8.0, which fixes the issue. Users unable to upgrade may also safely prevent the issue by using Solr's "Rule-Based Authentication Plugin" to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.

Apache Solr versions 6.6.0 through 9.7.0 are affected by a relative path traversal vulnerability ("zipslip") in the configset upload API when running on Windows. A malicious ZIP archive containing relative file paths can be uploaded to write files outside of the intended filesystem locations.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the 'configset upload' API.  Commonly known as a 'zipslip', maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.
This issue affects Apache Solr: from 6.6 through 9.7.0. Users are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr's 'Rule-Based Authentication Plugin' to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to
    arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly
    known as a "zipslip", maliciously constructed ZIP files can use relative filepaths to write data to
    unanticipated parts of the filesystem. This issue affects Apache Solr: from 6.6 through 9.7.0. Users are
    recommended to upgrade to version 9.8.0, which fixes the issue. Users unable to upgrade may also safely
    prevent the issue by using Solr's "Rule-Based Authentication Plugin" to restrict access to the configset
    upload API, so that it can only be accessed by a trusted set of administrators/users. (CVE-2024-52012)

ID	Name	Product	Family	Type	Severity
115556	Apache Solr 6.6.0 < 9.8.0 Configset Upload Arbitrary Path Write on Windows	Web App Scanning	Component Vulnerability	Version Based	high
266069	Apache Solr 6.6.x < 9.8.0 Relative Path Traversal	Nessus	CGI abuses	Remote	medium
420773	SCA: security update for org.apache.solr:solr-core (GHSA-4p5m-gvpf-f3x5)	Tenable Cloud Security	SCA Checks	Local	high
420773	SCA: security update for org.apache.solr:solr-core (GHSA-4p5m-gvpf-f3x5)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2024-52012

high

Tenable Plugins

high

medium

high

high