CVE-2019-0193: Apache Solr, Remote Code Execution via DataImportHandler

{
  "id": "85effe3ded12439408aa5b29cda609b91f6a762e60f8b98840309761535efb19",
  "url": "https://solr.apache.org/cve-2019-0193-apache-solr-remote-code-execution-via-dataimporthandler.html",
  "method": "llm",
  "payload": {
    "kind": "mitigation",
    "title": "CVE-2019-0193: Apache Solr, Remote Code Execution via DataImportHandler",
    "summary": "Apache Solr's DataImportHandler can allow remote code execution when its configuration is supplied through the `dataConfig` request parameter. Upgrade to 8.2.0 or later, or apply the documented configuration mitigation.",
    "evidence": "The DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's \"dataConfig\" parameter.",
    "products": [
      {
        "name": {
          "value": "Apache Solr",
          "evidence": "Apache Solr - solr/security"
        },
        "prerequisites": [
          {
            "value": "use of this parameter requires setting the Java System property enable.dih.dataConfigParam to true",
            "evidence": "Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property enable.dih.dataConfigParam to true."
          },
          {
            "value": "edit solrconfig.xml to configure all DataImportHandler usages with an \"invariants\" section listing the \"dataConfig\" parameter set to am empty string",
            "evidence": "or, edit solrconfig.xml to configure all DataImportHandler usages with an \"invariants\" section listing the \"dataConfig\" parameter set to am empty string."
          }
        ],
        "fixed_versions": [
          {
            "value": "8.2.0 or later",
            "evidence": "Mitigation: Upgrade to 8.2.0 or later, which is secure by default."
          }
        ],
        "affected_versions": [
          {
            "value": "5.0.0 to 5.5.5",
            "evidence": "Versions Affected: 5.0.0 to 5.5.5 6.0.0 to 6.6.5"
          },
          {
            "value": "6.0.0 to 6.6.5",
            "evidence": "Versions Affected: 5.0.0 to 5.5.5 6.0.0 to 6.6.5"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2019-0193",
        "evidence": "CVE-2019-0193: Apache Solr, Remote Code Execution via DataImportHandler"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity: High"
  },
  "source_id": "official-apache-solr-security",
  "document_id": 22997,
  "published_at": "2019-07-31T00:00:00+00:00"
}