Apache Solr Log4Shell RCE

Description

Due to vulnerabilities in Log4j library used by Apache Solr, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of Apache Solr

References

Apache projects affected by log4j CVE-2021-44228

Related Vulnerabilities

Code Evaluation (Ruby)

XSLT injection

Jenkins user enumeration

XML External Entity Injection via external file

WordPress Plugin WP SlackSync Information Disclosure (1.8.5)

Severity

High

Classification

CVE-2021-44228 CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A