Exploit for Solr_CVE-2019-17558

kitploit · 2026-08-26

Description

Python exploit script for Solr CVE-2019-17558 taking URL and whoami command.

Entry point

Parameterq · query param

Pathsolr/novacollection/select

Velocity Template Injection via VelocityResponseWriter in Solr (CVE-2019-17558) enabling remote code execution through crafted velocity template parameter

Affected Apache Solr versions

Apache Solr< 7.7.3, 8.4.0

All known vulnerabilities by product

Apache Solr Debian

CVSS 7.5 for CVE-2019-17558

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

CVE-2019-17558

Exploit Details

Modified:2026-08-26 06:36

Last Seen:2026-08-26 07:12

Reporter:KitPloit

Other exploits for CVE-2019-17558

Exploit_CVE-2019-17558-RCE

2026-08-26 KitPloitKITPLOIT

exphub

2026-08-26 KitPloitKITPLOIT

cve-2019-17558-apache-solr-rce

2026-08-25 KitPloitKITPLOIT

CVE-2019-17558_Solr_Vul_Tool

2026-08-24 KitPloitKITPLOIT

CVE-Apache-Ecosystem

2026-08-13 chengbochuan3GITHUB

Penetration_Testing_POC — Updated!

2026-07-29 KitPloitKITPLOIT

Exploit for Injection in Apache Solr

2026-02-16 rogerzeferinoGITHUB

Exploit for Improper Restriction of XML External Entity Reference in Apache Solr

2021-08-16 CreamGITEE

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MA1DONG-SOLR_CVE-2019-17558
# Solr_CVE-2019-17558

उपयोग: python3 Solr_CVE-2019-17558.py url whoami ![चित्र](https://raw.githubusercontent.com/gsheller/Solr_CVE-2019-17558/master/usage.jpg)

Exploit Code

Share

Share on social media: