VDB
BDU%3A2020-05183
BDU%3A2020-05183
PUBLISHED
CVSS 8.5 HIGH
Уязвимость компонента VelocityResponseWriter поискового сервера Apache Solr, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
8.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Canonical Ltd., Oracle Corp., Apache Software Foundation | Debian GNU/Linux, Ubuntu, Primavera Unifier, Solr |
Timeline
- Nov 17, 2020 CVE Published
- Feb 18, 2025 CVE Updated
References
- https://issues.apache.org/jira/browse/SOLR-13971 url
- https://access.redhat.com/security/cve/cve-2019-17558 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- http://packetstormsecurity.com/files/157078/Apache-Solr-8.3.0-Velocity-Template-Remote-Code-Execution.html url
- https://ubuntu.com/security/CVE-2019-17558 advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html advisory
- https://security-tracker.debian.org/tracker/CVE-2019-17558 advisory