Security Advisory
CVE-2017-3164
7.5
HIGH
Vulnerability Description
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.
Published Date
March 8, 2019
Official Source
NIST NVD Advisory