CVE-2019-0193: Apache Solr DataImportHandler Code Injection Vulnerability
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.
Other sources
The optional Apache Solr module DataImportHandler contains a code injection vulnerability.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.solr:solr-coreto a version that resolves this vulnerability.Fixed in 8.2.0 - Upgrade
Upgrade
debian/lucene-solrto a version that resolves this vulnerability.Fixed in 3.6.2+dfsg-24Fixed in 3.6.2+dfsg-26 - Upgrade
Upgrade
debian/lucene-solrto a version that resolves this vulnerability.Fixed in 3.6.2+dfsg-24 - Upgrade
Upgrade
debian/lucene-solrto a version that resolves this vulnerability.Fixed in 3.6.2+dfsg-26 - Configuration
Set the Java system property 'enable.dih.dataConfigParam' to true (for example, add -Denable.dih.dataConfigParam=true to the Solr JVM startup options) to require explicit enabling of the dataConfig request parameter.
Apache Solr (DataImportHandler) enable.dih.dataConfigParam = true
Event History
Frequently Asked Questions
What is CVE-2019-0193?
CVE-2019-0193 is a code injection vulnerability in Apache Solr's DataImportHandler.
How does the DataImportHandler vulnerability in Apache Solr work?
The vulnerability allows an attacker to inject malicious code through the "dataConfig" parameter of a request to the DataImportHandler.
What is the severity rating of CVE-2019-0193?
CVE-2019-0193 has a severity rating of 7.2, which is considered critical.
Which software versions are affected by CVE-2019-0193?
Apache Solr versions up to 8.2.0 are affected by CVE-2019-0193.
How can I fix the DataImportHandler vulnerability in Apache Solr?
To fix the vulnerability, update Apache Solr to a version that is not affected by CVE-2019-0193.