UpHeron
All vulnerabilities

Servers and applications

CVE-2017-3163

When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and…

Severity
High 7.5
Published
30 Aug 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
6.6% in the next 30 daysHigher than 93% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • Version 6.4.0
  • Version 6.3.0
  • Version 6.2.1
  • Version 6.2.0
All 8 release lines
  • Every version up to 5.5.3
  • Version 6.0.0
  • Version 6.0.1
  • Version 6.1.0
  • Version 6.2.0
  • Version 6.2.1
  • Version 6.3.0
  • Version 6.4.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-3163
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-3163