Debian/lucene-solr: medium 5.5
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemConfigSetService" component (the default in "standalone" or "use
Action: Upgrade lucene-solr to 3.6.2+dfsg-23 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.2+dfsg-23 | - |
Fixed versions
| 3.6.2+dfsg-23 |
Sources
- osv: DEBIAN-CVE-2025-24814#Debian:13/lucene-solr
- https://security-tracker.debian.org/tracker/CVE-2025-24814
published · modified · JSON