UpHeron
All vulnerabilities

Servers and applications

CVE-2020-13941

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the…

Severity
High 8.8
Published
17 Aug 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.6.0
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • Every version before 8.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-13941
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-13941