{"action":"Upgrade org.apache.solr:solr to 8.11.4 (8.x) or 9.7.0 (9.x) or later.","affected":[{"fixed":"8.11.4","introduced":"5.3.0"},{"fixed":"9.7.0","introduced":"9.0.0"}],"component":"org.apache.solr:solr","cve_ids":["CVE-2024-45216"],"ecosystem":"Maven","epss":0.92747,"exploited":false,"fixed_versions":["8.11.4","9.7.0"],"ghsa_id":"GHSA-mjvf-4h88-6xm3","id":"tcs_01M5N95B9YKMYJ9H0CHWJ77NPD","modified_at":"2025-07-02T00:01:27Z","published_at":"2024-10-16T09:30:31Z","references":["https://osv.dev/vulnerability/GHSA-mjvf-4h88-6xm3","https://nvd.nist.gov/vuln/detail/CVE-2024-45216","https://issues.apache.org/jira/browse/SOLR-17417","https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending","http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/webapp","http://www.openwall.com/lists/oss-security/2024/10/15/8"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mjvf-4h88-6xm3","url":"https://osv.dev/vulnerability/GHSA-mjvf-4h88-6xm3"}],"summary":"Improper Authentication vulnerability in Apache Solr"}