Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-1308: Apache Solr XXE vulnerability: Local files can be read

CVE-2018-1308 · published 8 years ago

Summary

Apache Solr versions 1.2 to 6.6.2 and 7.0.0 to 7.2.1 are affected by a vulnerability that allows an attacker to read local files from the server or internal network. This is a serious issue because it could allow unauthorized access to sensitive data. To protect your system, update to a patched version of Solr or remove the DataImportHandler's &dataConfig=<inlinexml> parameter.

What to do

Update apache org.apache.solr:solr-core to version 6.6.3.
Update apache org.apache.solr:solr-core to version 7.3.0.

Affected software

Ecosystem	Vendor	Product	Affected versions
maven	apache	org.apache.solr:solr-core	>= 1.2, < 6.6.3 >= 7.0.0, < 7.3.0 Fix: upgrade to 6.6.3
–	apache	solr	>= 1.2, <= 6.6.2 >= 7.0.0, <= 7.2.1 `cpe:2.3:a:apache:solr::::::::`
–	debian	debian_linux	7.0 8.0 9.0 `cpe:2.3:o:debian:debian_linux:7.0:::::::*`

Original advisory text

This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network.

References

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

21% chance of attack within 30 days

Type

CWE-611XML External Entity (XXE)

Timeline

Published9 Apr 2018

Updated22 Oct 2026

First seen6 Mar 2026

Sources

GHSA-3pph-2595-cgfh · GHSA

CVE-2018-1308 · NVD

Track software like this

Free during beta