{"action":"Upgrade org.apache.solr:solr to 8.11.4 (8.x) or 9.7.0 (9.x) or later.","affected":[{"fixed":"8.11.4","introduced":"6.6.0"},{"fixed":"9.7.0","introduced":"9.0.0"}],"component":"org.apache.solr:solr","cve_ids":["CVE-2024-45217"],"ecosystem":"Maven","epss":0.00742,"exploited":false,"fixed_versions":["8.11.4","9.7.0"],"ghsa_id":"GHSA-h7w9-c5vx-x7j3","id":"tcs_01M5N9019WKT8D97MYAEY8EPP8","modified_at":"2025-07-02T14:20:10Z","published_at":"2024-10-16T09:30:31Z","references":["https://osv.dev/vulnerability/GHSA-h7w9-c5vx-x7j3","https://nvd.nist.gov/vuln/detail/CVE-2024-45217","https://issues.apache.org/jira/browse/SOLR-17418","https://solr.apache.org/security.html#cve-2024-45217-apache-solr-configsets-created-during-a-backup-restore-command-are-trusted-implicitly","http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/webapp","http://www.openwall.com/lists/oss-security/2024/10/15/9"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-h7w9-c5vx-x7j3","url":"https://osv.dev/vulnerability/GHSA-h7w9-c5vx-x7j3"}],"summary":"Insecure Default Initialization of Resource vulnerability in Apache Solr"}