CVE-2017-3164: SSRF
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-3164?
CVE-2017-3164 is a vulnerability in Apache Solr that allows an attacker to perform server-side request forgery.
Which versions of Apache Solr are affected by CVE-2017-3164?
CVE-2017-3164 affects Apache Solr versions 1.3.0 to 7.6.0 (inclusive).
What is the severity of CVE-2017-3164?
The severity of CVE-2017-3164 is considered high with a CVSS score of 7.5.
How does CVE-2017-3164 work?
CVE-2017-3164 allows an attacker to make Solr perform an HTTP GET request to any reachable URL by exploiting the lack of a whitelist mechanism for the "shards" parameter.
Are there any references for CVE-2017-3164?
Yes, you can find references for CVE-2017-3164 at the following links: [1] [2] [3].