Components
Vulnerabilities
Pricing
MCP
API
Docs
Sign up
Login
acts_as_solr 1.2.0 | Vulnerabilities | Sonatype Guide
gem
acts_as_solr
1.2.0
acts_as_solr 1.2.0
Published
Mar 3, 2010
•
Policy
compliance
gem Registry
Developer Trust Score
N/A
Recommended Version:
x.y.z
Latest version with 0 known vulnerabilities that meets your policy.
Compare Versions
Overview
Overview
Versions
9
Versions
9
Vulnerabilities
40
Vulnerabilities
40
Dependencies
0
Dependencies
0
Reset filters
Severity
Critical
(3)
High
(0)
Medium
(0)
Low
(0)
CVSS Score
0.0
10.0
EPSS Score
0.0
1.0
Malware
KEV Status
Published
Filter
Sort: Published (Newest first)
9.8
CVE-2021-44548
An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB attacks, which may result in: * The exfiltration of sensitive data such as OS user hashes (NTLM/LM hashes), * In case of misconfigured systems, SMB Relay Attacks which can lead to user impersonation on SMB Shares or, in a worse-case scenario, Remote Code Execution This issue affects all Apache Solr versions prior to 8.11.1. This issue only affects Windows.
affected
Severity
Critical
Published
Dec 22, 2021
9.8
sonatype-2018-0624
woodstox-core - XML eXternal Entity (XXE)
affected
Severity
Critical
Published
Mar 9, 2020
9.8
CVE-2016-1000031
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
affected
Severity
Critical
Published
Mar 28, 2017
