CVE-2020-13957

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-13957
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13957.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-13957
Aliases
Published
2020-10-13T19:15:12.460Z
Modified
2026-03-20T11:32:34.455534Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.

References

Affected packages

Git / github.com/apache/lucene-solr

Affected ranges

Type
GIT
Repo
https://github.com/apache/lucene-solr
Events
Introduced
5c7a7b65d2aa7ce5ec96458315c661a18b320241
Last affected
68fa249034ba8b273955f20097700dc2fbb7a800
Introduced
3ba304b29825a94249c5145b3f5061e87b87d8f8
Last affected
1a0d2a901dfec93676b0fe8be425101ceb754b85
Introduced
2ae4746365c1ee72a0047ced7610b2096e438979
Last affected
016993b65e393b58246d54e8ddda9f56a453eb0e
Database specific 
{
    "versions": [
        {
            "introduced": "6.6.0"
        },
        {
            "last_affected": "6.6.6"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "last_affected": "7.7.3"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.6.2"
        }
    ]
}

Affected versions

releases/lucene-solr/6.*
releases/lucene-solr/6.6.0
releases/lucene-solr/6.6.1
releases/lucene-solr/6.6.2
releases/lucene-solr/6.6.3
releases/lucene-solr/6.6.4
releases/lucene-solr/6.6.5
releases/lucene-solr/6.6.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13957.json"