CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access
MediumCVSS 5.4
EPSS 47.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Relative Path Traversal vulnerability in Apache Solr.
Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.
This issue affects Apache Solr: from 6.6 through 9.7.0.
Users are recommended to upgrade to version 9.8.0, which fixes the issue. Users unable to upgrade may also safely prevent the issue by using Solr's "Rule-Based Authentication Plugin" to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.solr/solr-core(Maven) | >= 6.6, < 9.8.0 | 9.8.0 |
| org.apache.solr/solr-core(Maven) | = 6.6.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 6.6.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 6.6.2 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 6.6.3 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 6.6.4 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 6.6.5 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 6.6.6 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.0.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.0.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.1.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.2.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.2.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.3.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.3.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.4.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.5.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.6.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.7.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.7.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.7.2 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 7.7.3 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.0.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.1.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.1.1 | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.solr/solr-core(Maven) | = 8.10.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.10.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.11.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.11.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.11.2 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.11.3 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.11.4 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.2.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.3.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.3.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.4.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.4.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.5.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.5.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.5.2 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.6.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.6.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.6.2 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.6.3 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.7.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.8.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.8.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.8.2 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 8.9.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.0.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.1.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.1.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.2.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.2.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.3.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.4.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.4.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.5.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.6.0 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.6.1 | No fix listed |
| org.apache.solr/solr-core(Maven) | = 9.7.0 | No fix listed |
| Apache Solr | >= 6.6, <= 9.7.0 | No fix listed |
| apache solr | >= 6.6.0, < 9.8.0 | 9.8.0 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com product
- issues.apache.org
- lists.apache.org mailing-list vendor-advisory
- www.openwall.com mailing-list third-party-advisory
- github.com
- Debian Security Tracker CVE-2024-52012 vendor-advisory