[ authorization ] [ registration ] [ Yenileme ]
Iletisim
Bize ulasabilirsiniz:
0day.today Exploits Market and 0day Exploits Database

Apache Solr Backup/Restore API Remote Code Execution Exploit

[ 0Day-ID-39589 ]
Full Baslik
Apache Solr Backup/Restore API Remote Code Execution Exploit [ Highlight ]
Highlight - is paid service, that can help to get more visitors to your material.

Price:
Eklenme Tarihi
Kategori
Platform
Dogrulanma
Fiyat
Ucretsiz
Risk
[
Security Risk Critical
]
Rel. releases
Tanim
Apache Solr versions 6.0.0 through 8.11.2 and versions 9.0.0 up to 9.4.1 are affected by an unrestricted file upload vulnerability which can result in remote code execution in the context of the user running Apache Solr. When Apache Solr creates a Collection, it will use a specific directory as the classpath and load some classes from it. The backup function of the Collection can export malicious class files uploaded by attackers to the directory, allowing Solr to load custom classes and create arbitrary Java code. Execution can further bypass the Java sandbox configured by Solr, ultimately causing arbitrary command execution.
CVE
CVE-2023-50386
Other Information
Abuses
0
Yorumlar
0
Goruntulemeler
1 458
We DO NOT use Telegram or any messengers / social networks! We DO NOT use Telegram or any messengers / social networks! Please, beware of scammers!
Ucretsiz
Open Exploit
You can open this source code for free
Open Exploit
Open Exploit
You can open this source code for free
Verified by
Verified by
This material is checked by Administration and absolutely workable.
Yazar
BL
29
Exploit
1626
Okuyucular
57
[ Yorumlar: 0 ]
Terms of use of comments:
  • Users are forbidden to exchange personal contact details
  • Haggle on other sites\projects is forbidden
  • Reselling is forbidden
Punishment: permanent block of user account with all Gold.

Yorum yazabilmek icin giris yapin ve ya uye olun