E19-0quo1
CVSS:
9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
5
Year:
2019
Description
This strike exploits an insecure deserialization vulnerability in Apache Solr.
The vulnerability is due to insufficient sanitization of requests made to the Config API.
This vulnerability can be exploited by sending a specially crafted HTTP request to the Config API.
Successful exploitation could lead to remote code execution withing the context of the server.
