CVE-2021-27905Not scoredCWE-918

CVE-2021-27905: SSRF vulnerability with the Replication handler

Apache Software Foundation · Apache Solr

Vendor fix available · Affected: Apache Software Foundation Apache Solr · Exploitation: check available, not yet exploited

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

93.0%probability of exploitation in the next 30 days

99th percentile

050100

Higher than 99% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Apache Software Foundation · Apache Solrfrom Apache Solr before 8.8.2

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
CISA KEV: Not listed
Public check: Apache Solr <=8.8.1 - Server-Side Request Forgery · nuclei template in projectdiscovery/nuclei-templates
Weakness: Server-Side Request Forgery
Vendor: Apache Software Foundation
Published: April 2021
Band: Check available, not yet exploited, April 2021
Bounty reports: 1 disclosed on HackerOne

Disclosed bug bounty reports about CVE-2021-27905

The reports on HackerOne that name this CVE, with HackerOne's own outcome. Titles and metadata only.

SSRF due to CVE-2021-27905 in www.████████U.S. Dept Of Defense · 2022 · medium severityValid

CoverageNo articles yet

No CyberSIXT article names CVE-2021-27905 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.