CVE-2021-44548: Apache Solr information disclosure vulnerability through DataImportHandler

Published Dec 23, 2021
·
Updated

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB attacks, which may result in: The exfiltration of sensitive data such as OS user hashes (NTLM/LM hashes), In case of misconfigured systems, SMB Relay Attacks which can lead to user impersonation on SMB Shares or, in a worse-case scenario, Remote Code Execution This issue affects all Apache Solr versions prior to 8.11.1. This issue only affects Windows.

Affected Software

4 affected components
All of the following
Apache Solr<8.11.1
Microsoft Windows
Apache Solr<8.11.1
Microsoft Windows

Event History

Dec 23, 2021
CVE Published
via MITRE·08:55 AM
Data Sourced
via MITRE·08:55 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2021-44548?

CVE-2021-44548 is an Improper Input Validation vulnerability in the DataImportHandler of Apache Solr.

2

What is the severity of CVE-2021-44548?

CVE-2021-44548 has a severity rating of 9.8, which is classified as critical.

3

How does CVE-2021-44548 work?

CVE-2021-44548 allows an attacker to provide a Windows UNC path, triggering an SMB network call from the Solr host to another host on the network.

4

What is the affected software for CVE-2021-44548?

CVE-2021-44548 affects Apache Solr version up to 8.11.1.

5

How can I fix CVE-2021-44548?

To fix CVE-2021-44548, it is recommended to update Apache Solr to a version that addresses the vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203