Exploit for Solr-SSRF

kitploit · 2026-08-26

Description

SSRF in Apache Solr (CVE-2021-27905) with Burp reproduction and Xray detection plugin.

Entry point

ParametermasterUrl · query param

Path/replication

LFI/SSRF via Solr ReplicationHandler masterUrl/leaderUrl parameters

Affected Apache Solr versions

Apache Solr< 8.8.2

All known vulnerabilities by product

CVSS 9.8 for CVE-2021-27905

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

93.1%higher than 99.8% of all CVEs

Updated 2026-08-28

Exploit Details

Modified:2026-08-26 07:35

Last Seen:2026-08-26 10:17

Reporter:KitPloit

Tags

Apache SolrSSRFCVE-2021-27905Xray pluginBurp Suite

Other exploits for CVE-2021-27905

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2021-27905.POC

2026-08-27 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit for Server-Side Request Forgery in Apache Solr

2025-10-18 RIZZZIOMGITHUB

Exploit for Server-Side Request Forgery in Apache Solr

2022-11-03 pdelteilGITHUB

Exploit for Server-Side Request Forgery in Apache Solr

2021-08-10 murataydemirGITHUB

Apache Solr SSRF漏洞 (CVE-2021-27905)

2021-06-03 KnownsecSEEBUG

Exploit Code

MARKDOWN13 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-W2NING-SOLR-SSRF
# Solr-SSRF

CVE-2021-27905

  * Il pacchetto repeat del file Burp contiene i passaggi specifici per la riproduzione

  * Il POC è il plugin di rilevamento di Xray




![image](https://raw.githubusercontent.com/W2Ning/Solr-SSRF/main/example.png)