Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: apache
Published: 2019-09-10T14:06:54
Updated: 2024-08-04T23:17:40.122Z
Reserved: 2019-05-28T00:00:00
Link: CVE-2019-12401
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-09-10T15:15:11.737
Modified: 2024-11-21T04:22:45.853
Link: CVE-2019-12401
Redhat