Exploit for Deserialization of Untrusted Data in Apache Solr

CVE-2019-0192

githubexploit · 2019-11-01

Description

Exploit for Apache Solr deserialization of untrusted dat

Affected Apache Solr versions

Apache Solr≤ 5.5.5, 6.6.5

All known vulnerabilities by product

Apache Solr

CVSS 9.8 for CVE-2019-0192

9.8

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

96%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

77.5%higher than 99.5% of all CVEs

Updated 2026-08-25

Exploit Details

Modified:2025-02-27 07:39

Last Seen:2025-08-31 20:33

Reporter:Rapidsafeguard

Written in:Python

Last commit:2019-11-01

Other exploits for CVE-2019-0192

CVE-2019-0192

2026-08-26 KitPloitKITPLOIT

Solr-RCE-CVE-2019-0192

2026-08-26 KitPloitKITPLOIT

Exploit Code

README9 lines

## https://sploitus.com/exploit?id=F7B9CAF5-2381-5CE2-9434-D13B87CEBB2D
# Solr-RCE-CVE-2019-0192
Apache Solr remote code execution via dataImportHandler

### Target Solr version: 1.3 – 8.2
Requirements: DataImportHandler should be enabled, which is not by default. I have tested on version 6.2

### python 
python solr_RCE.py

Exploit Code

Share

Share on social media: