Intrusion PreventionApache.Solr.ConfigSets.Arbitrary.File.Upload
Description
This indicates an attack attempt to exploit an Arbitrary File Upload Vulnerability in Apache Software Foundation Solr.
The vulnerability is due to insufficient validation of user inputs. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in arbitrary code execution.
Affected Products
Apache Software Foundation Solr 6.0.0 through 8.11.2
Apache Software Foundation Solr 9.0.0 before 9.4.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://solr.apache.org/security.html#cve-2023-50386-apache-solr-backuprestore-apis-allow-for-deployment-of-executables-in-malicious-configsets
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 55469 |
| Created | Apr 08, 2024 |
| Updated | Apr 16, 2024 |
| Risk |
|
| CVE ID | CVE-2023-50386 |
| Exploit Prediction Score | 87.24% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apache |