.. / CVE-2021-27905

• SSRF
• Nuclei
• Web

Exploit for Apache Solr <=8.8.1 - Server-Side Request Forgery (CVE-2021-27905)

Description:

Apache Solr versions 8.8.1 and prior contain a server-side request forgery vulnerability. The ReplicationHandler (normally registered at “/replication” under a Solr core) in Apache Solr has a “masterUrl” (also “leaderUrl” alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the “shards” parameter.

Nuclei Template

View the template here CVE-2021-27905.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-27905.yaml

References: