UpHeron
All vulnerabilities

Servers and applications

CVE-2021-27905

The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards"…

Severity
Critical 9.8
Published
13 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.8.2
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • Every version before 8.8.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-27905
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-27905