cve/2019/CVE-2019-17558.md

CVE-2019-17558

Description

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting params.resource.loader.enabled by defining a response writer with that setting set to true. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is trusted (has been uploaded by an authenticated user).

POC

Reference

• http://packetstormsecurity.com/files/157078/Apache-Solr-8.3.0-Velocity-Template-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/157078/Apache-Solr-8.3.0-Velocity-Template-Remote-Code-Execution.html
• https://www.oracle.com/security-alerts/cpuoct2020.html
• https://www.oracle.com/security-alerts/cpuoct2020.html

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/Goby
• https://github.com/20142995/pocsuite3
• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/ArrestX/--POC
• https://github.com/Awrrays/FrameVul
• https://github.com/CLincat/vulcat
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/GhostTroops/TOP
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Imanfeng/Apache-Solr-RCE
• https://github.com/JERRY123S/all-poc
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Ma1Dong/Solr_CVE-2019-17558
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Nishacid/Easy_RCE_Scanner
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/SDNDTeam/CVE-2019-17558_Solr_Vul_Tool
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/Z0fhack/Goby_POC
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/bigblackhat/oFx
• https://github.com/cyberanand1337x/bug-bounty-2022
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/flyarong/pwnserver
• https://github.com/hanc00l/some_pocsuite
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/hktalent/TOP
• https://github.com/hktalent/bug-bounty
• https://github.com/huike007/penetration_poc
• https://github.com/huimzjty/vulwiki
• https://github.com/jbmihoub/all-poc
• https://github.com/koala2099/GitHub-Chinese-Top-Charts
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/mustblade/solr_hacktool
• https://github.com/neilzhang1/Chinese-Charts
• https://github.com/openx-org/BLEN
• https://github.com/p4d0rn/Siren
• https://github.com/peiqiF4ck/WebFrameworkTools-5.1-main
• https://github.com/pinkieli/GitHub-Chinese-Top-Charts
• https://github.com/qingyuanfeiniao/Chinese-Top-Charts
• https://github.com/rockmelodies/rocComExpRce
• https://github.com/sobinge/nuclei-templates
• https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool
• https://github.com/veracode-research/solr-injection
• https://github.com/weeka10/-hktalent-TOP
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/woods-sega/woodswiki
• https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/zhzyker/exphub
• https://github.com/zoroqi/my-awesome