{"action":"Upgrade org.apache.solr:solr-core to 5.5.5 (5.x), 6.6.2 (6.x) or 7.1.0 (7.x) or later.","affected":[{"fixed":"7.1.0","introduced":"7.0.0"},{"fixed":"6.6.2","introduced":"6.0.0"},{"fixed":"5.5.5","introduced":"5.5.0"}],"component":"org.apache.solr:solr-core","cve_ids":["CVE-2017-12629"],"ecosystem":"Maven","epss":0.91896,"exploited":false,"fixed_versions":["7.1.0","6.6.2","5.5.5"],"ghsa_id":"GHSA-mh7g-99w9-xpjm","id":"tcs_01M5N954H3TNEJAPCJME5CWNBA","modified_at":"2024-04-12T21:16:02.453722Z","published_at":"2018-10-17T19:56:17Z","references":["https://osv.dev/vulnerability/GHSA-mh7g-99w9-xpjm","https://nvd.nist.gov/vuln/detail/CVE-2017-12629","https://github.com/apache/lucene-solr/commit/3bba91131b5257e64b9d0a2193e1e32a145b2a2","https://github.com/apache/lucene-solr/commit/d8000beebfb13ba0b6e754f84c760e11592d8d1","https://github.com/apache/lucene-solr/commit/f9fd6e9e26224f26f1542224ce187e04c27b268","https://www.exploit-db.com/exploits/43009","https://www.debian.org/security/2018/dsa-4124","https://usn.ubuntu.com/4259-1","https://twitter.com/searchtools_avi/status/918904813613543424","https://twitter.com/joshbressers/status/919258716297420802","https://twitter.com/ApacheSolr/status/918731485611401216","https://s.apache.org/FJDl","https://lists.debian.org/debian-lts-announce/2018/01/msg00028.html","https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef@%3Cusers.solr.apache.org%3E","https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314@%3Cusers.solr.apache.org%3E","https://lists.apache.org/thread.html/r26c996b068ef6c5e89aa59acb769025cfd343a08e63fbe9e7f3f720f@%3Coak-issues.jackrabbit.apache.org%3E","https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc@%3Cusers.solr.apache.org%3E","https://issues.apache.org/jira/browse/SOLR-11477","https://github.com/apache/lucene","https://github.com/advisories/GHSA-mh7g-99w9-xpjm","https://access.redhat.com/errata/RHSA-2018:0005","https://access.redhat.com/errata/RHSA-2018:0004","https://access.redhat.com/errata/RHSA-2018:0003","https://access.redhat.com/errata/RHSA-2018:0002","https://access.redhat.com/errata/RHSA-2017:3452","https://access.redhat.com/errata/RHSA-2017:3451","https://access.redhat.com/errata/RHSA-2017:3244","https://access.redhat.com/errata/RHSA-2017:3124","https://access.redhat.com/errata/RHSA-2017:3123","http://mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E","http://openwall.com/lists/oss-security/2017/10/13/1","http://www.securityfocus.com/bid/101261"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mh7g-99w9-xpjm","url":"https://osv.dev/vulnerability/GHSA-mh7g-99w9-xpjm"}],"summary":"Remote code execution occurs in Apache Solr"}