{"id":9565,"date":"2019-11-12T01:43:56","date_gmt":"2019-11-12T01:43:56","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9565"},"modified":"2026-04-17T18:07:51","modified_gmt":"2026-04-17T18:07:51","slug":"apache-solr-velocity-remote-code-execution-vulnerability-handling-guide","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/apache-solr-velocity-remote-code-execution-vulnerability-handling-guide\/","title":{"rendered":"Apache Solr velocity Remote Code Execution Vulnerability Handling Guide"},"content":{"rendered":"


\n<\/p>\n

Vulnerability Description<\/strong><\/h2>\n

On October 30, @_S00pY disclosed the exploitation of Apache Solr Remote Code Execution Vulnerability, which allows attackers to implement remote code execution via velocity templates. After testing, the vulnerability can be successfully triggered, and no official security patch has been released.<\/p>\n

This vulnerability needs to be triggered in two steps. First, the attacker needs to modify the “params.Resource.Loader.Enabled” configuration item to True through the config API, and then complete the vulnerability trigger by sending a malicious velocity template.<\/p>\n

Some POC codes are as follows:<\/p>\n

\"Red<\/a><\/p>\n

After successful utilization, arbitrary commands can be executed on the server.<\/p>\n

\"Red<\/a><\/p>\n

Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/strong><\/p>\n