Description
Apache Solr ReplicationHandler存在目录遍历漏洞，此漏洞是由于replication接口对用户的请求验证不当导致的。
Apache Solr ReplicationHandler CVE-2017-3163 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2017-3163
https://access.redhat.com/security/cve/cve-2017-3163
https://lists.apache.org/thread/djbtgyj76tz0b9gbmc4v6fl6gfyblbd4
https://www.miggo.io/vulnerability-database/cve/CVE-2017-3163
https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHESOLR-31393
https://solr.apache.ac.cn/news.html
https://solr.apache.org/news.html
https://github.com/veracode-research/solr-injection
https://bugzilla.redhat.com/show_bug.cgi?id=1454783
https://security-tracker.debian.org/tracker/CVE-2017-3163