Exploit for Injection in Apache Solr

CVE-2019-17558

githubexploit · 2020-08-04

Description

Exploit for Apache Solr injection vulnerabilit

Entry point

Parameterq · query param

Pathsolr/novacollection/select

Velocity Template Injection via VelocityResponseWriter in Solr (CVE-2019-17558) enabling remote code execution through crafted velocity template parameter

Affected Apache Solr versions

Apache Solr< 7.7.3, 8.4.0

All known vulnerabilities by product

Apache Solr Debian

CVSS 7.5 for CVE-2019-17558

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

95%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

98.6%higher than 99.9% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2021-09-15 09:34

Last Seen:2025-08-31 20:38

Reporter:gsheller

Written in:Python

Last commit:2020-08-04

Other exploits for CVE-2019-17558

Solr_CVE-2019-17558

2026-08-27 KitPloitKITPLOIT

Exploit_CVE-2019-17558-RCE

2026-08-27 KitPloitKITPLOIT

cve-2019-17558-apache-solr-rce

2026-08-25 KitPloitKITPLOIT

CVE-2019-17558_Solr_Vul_Tool

2026-08-24 KitPloitKITPLOIT

CVE-Apache-Ecosystem

2026-08-13 chengbochuan3GITHUB

Exploit for Injection in Apache Solr

2026-02-16 rogerzeferinoGITHUB

Exploit for Improper Restriction of XML External Entity Reference in Apache Solr

2021-08-16 CreamGITEE

Exploit for Improper Restriction of XML External Entity Reference in Apache Solr

2021-03-07 何以为春GITEE

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=7B750A4E-8595-589E-8B9F-2A92BA0BFE3A
# Solr_CVE-2019-17558
usage:
python3 Solr_CVE-2019-17558.py url whoami
![image](https://github.com/gsheller/Solr_CVE-2019-17558/blob/master/usage.jpg)

Exploit Code

Share

Share on social media: