CVE-2024-45216
1 advisory.
Maven/org.apache.solr:solr CVE-2024-45216: critical 9.8
Improper Authentication vulnerability in Apache Solr
Action: Upgrade org.apache.solr:solr to 8.11.4 (8.x) or 9.7.0 (9.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 8.11.4 | - |
| 9.0.0 | 9.7.0 | - |
Fixed versions
| 8.11.4 | 9.7.0 |
Sources
- osv: GHSA-mjvf-4h88-6xm3
- https://nvd.nist.gov/vuln/detail/CVE-2024-45216
- https://issues.apache.org/jira/browse/SOLR-17417
- https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending
- http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/webapp
- http://www.openwall.com/lists/oss-security/2024/10/15/8
CVE-2024-45216 · published · modified · JSON