Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apache
Published: 2019-09-10T14:06:54
Updated: 2020-07-21T13:37:58
Reserved: 2019-05-28T00:00:00
Link: CVE-2019-12401
JSON object: View
NVD Information
Status : Modified
Published: 2019-09-10T15:15:11.737
Modified: 2023-11-07T03:03:33.210
Link: CVE-2019-12401
JSON object: View
Redhat Information
No data.
CWE