EDB-48338

functional

Apache Solr - Remote Code Execution via Velocity Template (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2020-04-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-17558UShigh7.5OT criticalKEV
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan