CVE-2025-24814
Apache Solr: core creation with a trusted configset can pick up untrusted files
Technology
Apache Solr
CVSS Score
5.5 / 10.0
Affected Versions
All versions through 9.7
Upstream Fix
9.8.0
Published
January 27, 2025
OSSeva Coverage
Fixed upstream
Description
In standalone or user-managed mode, which uses FileSystemConfigSetService by default, and with authentication and authorization off, core creation can swap individual files of a trusted configset for replacements elsewhere on the file system. The replacements are treated as trusted and can use lib tags to add code to Solr's classpath. Rated moderate by the Solr PMC. Solr 9.8.0 mitigates it by disabling lib tags by default; enabling authentication and authorization or moving to SolrCloud also protects against it.
Is your Apache Solr deployment affected?
If you're running All versions through 9.7, you need this patch. Book a discovery call to get covered.
View Apache Solr coverage →Get a quote
Running Apache Solr All versions through 9.7?
Send your work email and a senior engineer will tell you whether this CVE applies to your versions and who patches it. Reply within 1 business day.
Prefer to talk or read more first?