CVE-2020-13941 Improper Input Validation in Apache Solr

What is CVE-2020-13941?

CVE-2020-13941 is a high-severity vulnerability in Apache Solr, published on 17 Aug 2020.

Official description

Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

Weakness: CWE-20

Which versions are affected by CVE-2020-13941?

3 open source packages ship an affected version, including org.apache.solr:solr-parent and solr. It affects 1 product.

Products include Apache Solr.

How do I fix CVE-2020-13941?

Upgrade org.apache.solr:solr-parent to 8.6.0 or later.

Is CVE-2020-13941 being exploited?

There is no known exploitation of CVE-2020-13941 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

Other vulnerabilities in Apache Solr

• CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Exploited High 7.5
• CVE-2019-0193 Apache Solr DataImportHandler Code Injection Exploited High 7.2
• CVE-2024-45216 Apache Solr: Authentication bypass possible using a fake URL Path ending Critical 9.8
• CVE-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler Critical 9.8
• CVE-2021-27905 SSRF vulnerability with the Replication handler Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BIT-solr-2020-13941, DEBIAN-CVE-2020-13941, GHSA-2467-h365-j7hm, UBUNTU-CVE-2020-13941.