Vulnerability in Apache Solr

CVE-2020-13957

Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authenticati…

EPSS: 0.848 (99.4th percentile) — read the EPSS interpretation.

Affected products

  • N/a Apache Solr — versions Apache Solr 6.6.0 to 6.6.6, 7.0.0 to 7.7.3, 8.0.0 to 8.6.2

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2020-13957?
CVE-2020-13957 is a vulnerability in Apache Solr. Published 2020-10-13.
Is CVE-2020-13957 known to be exploited?
29 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.