Description
2024年2月，Apache Solr 官方披露CVE-2023-50386 Apache Solr Backup/Restore APIs 代码执行漏洞。攻击者可构造恶意请求利用 Backup/Restore APIs 造成任意代码执行。官方已发布安全更新，建议升级至最新版本。
Apache Solr Backup/Restore APIs 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://l3yx.github.io/2024/02/10/Apache-Solr-Backup-Restore-APIs-RCE-CVE-2023-50386-%E5%88%86%E6%9E%90%E5%8F%8A%E6%8C%96%E6%8E%98%E6%80%9D%E8%B7%AF/
https://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC
https://avd.aliyun.com/detail?id=AVD-2023-50386
https://nvd.nist.gov/vuln/detail/CVE-2023-50386
https://solr.apache.org/security.html#cve-2023-50386-apache-solr-backuprestore-apis-allow-for-deployment-of-executables-in-malicious-configsets
https://www.rapid7.com/db/modules/exploit/linux/http/apache_solr_backup_restore/
https://issues.apache.org/jira/browse/SOLR-16480
https://www.sentinelone.com/vulnerability-database/cve-2023-50386/
https://cve.imfht.com/detail/CVE-2023-50386?lang=en