EDB-43009

functional

Apache Solr 7.0.1 - XML External Entity Expansion / Remote Code Execution

view exploit source exploit_dbverifiedtype webappsauthor Michael Stepankin & Olga Barinovapublished 2017-10-17catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-12629UScritical9.8Exploit
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the Run…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan