CVE-2019-17558

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-17558
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-17558.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-17558
Aliases
Downstream
Published
2019-12-30T17:15:19.780Z
Modified
2026-06-26T03:55:14.303485874Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting params.resource.loader.enabled by defining a response writer with that setting set to true. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is trusted (has been uploaded by an authenticated user).

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_RANGE",
            "cpes": [
                "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "17.7"
                },
                {
                    "last_affected": "17.12"
                }
            ],
            "vendor_product": "oracle:primavera_unifier"
        },
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "16.1"
                },
                {
                    "last_affected": "16.2"
                },
                {
                    "last_affected": "18.8"
                },
                {
                    "last_affected": "19.12"
                }
            ],
            "vendor_product": "oracle:primavera_unifier"
        }
    ]
}
References

Affected packages

Git / github.com/apache/lucene-solr

Affected ranges

Type
GIT
Repo
https://github.com/apache/lucene-solr
Events
Introduced
859fdefbceb3ffe088e5091fd695380e81a49c11
Fixed
1a0d2a901dfec93676b0fe8be425101ceb754b85
Introduced
2ae4746365c1ee72a0047ced7610b2096e438979
Fixed
bc02ab906445fcf4e297f4ef00ab4a54fdd72ca2
Database specific 
{
    "cpe": "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "7.7.3"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.4.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-17558.json"

Git / github.com/apache/solr

Affected ranges

Type
GIT
Repo
https://github.com/apache/solr
Events
Introduced
859fdefbceb3ffe088e5091fd695380e81a49c11
Fixed
1a0d2a901dfec93676b0fe8be425101ceb754b85
Introduced
2ae4746365c1ee72a0047ced7610b2096e438979
Fixed
bc02ab906445fcf4e297f4ef00ab4a54fdd72ca2
Database specific 
{
    "cpe": "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "7.7.3"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.4.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-17558.json"