CVE-2018-1308

—

CVSS 3.0

7.5 high

EPSS

21%p97

Published

Apr 9, 2018 (Apr 9, 2018)

Modified

Jun 17, 2026

Description

This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig= ` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network.

Vendors: apache debian
Products: solr, debian linux
Weakness: CWE-611
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (21.2%)

In the news0 stories

No ingested article mentions this CVE yet.