UpHeron
All vulnerabilities

Servers and applications

CVE-2019-0193

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 10 Dec 2021.

Severity
High 7.2
Published
1 Aug 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.7.3, 8.1.2
Exploit chance
84% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • Every version before 7.7.3
  • From 8.1.0 before 8.1.2

Known exploited

CISA name
Apache Solr DataImportHandler Code Injection Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
10 Jun 2022
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-0193
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-0193