All vulnerabilities

Servers and applications

CVE-2021-44548

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB attacks, which may result in: * The exfiltration of sensitive data such as OS user hashes (NTLM/LM…

Severity
Critical 9.8
Published
23 Dec 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.11.1
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • Every version before 8.11.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-44548
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-44548