#VU103324 Permissions, Privileges, and Access Controls in Apache Solr - CVE-2025-24814

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an error when handling configuration files. Solr instances that use the "FileSystemConfigSetService" component (the default in "standalone" or "user-managed" mode), and are running without authentication and authorization are vulnerable to a sort of privilege escalation wherein individual "trusted" configset files can be ignored in favor of potentially-untrusted replacements available elsewhere on the filesystem. These replacement config files are treated as "trusted" and can use "<lib>" tags to add to Solr's classpath, which an attacker might use to load malicious code as a searchComponent or other plugin.

Remediation

External links

• https://lists.apache.org/thread/wmwjrjj969rtvn84m7zdby17ht29c4lr