Description
当Apache Solr配置为集群模式（cloud mode）启动时，攻击者可以利用Schema Designer功能上传恶意配置文件，最终通过加载恶意的 jar 包实现远程代码执行
Apache Solr /api/schema-designer 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/4a5e84c6-45c1-47ad-8f88-74e6d8b8b008
https://www.venustech.com.cn/new_type/aqtg/20240220/27040.html
https://solr.apache.org/security.html
https://medium.com/@tvvzvpb186/dont-panic-yet-breaking-down-the-latest-apache-solr-rce-vulnerability-207028a56369
https://www.miggo.io/vulnerability-database/cve/CVE-2023-50292
https://lists.apache.org/thread/jkfgxrjmpo9tqv8yqbnnbfbsorpncch4
https://it.shanghaitech.edu.cn/2024/0223/c8406a1088188/page.htm
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Apache-Solr-%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CNVD-2023-27598.md
https://avd.aliyun.com/detail?id=AVD-2023-1687472
https://cn-sec.com/archives/2139715.html