published December 23, 2021
🚨 An improperly validated input could lead to a dramatic SMB network call, turning your Apache Solr into a bridge for sneaky attackers! 🔥 Think of it like a mail carrier accepting a package addressed to one person but delivering it to anyone on the street without checking — that's how easily this vulnerability can expose sensitive data on your network. An attacker could exploit this vulnerability to exfiltrate sensitive data, including OS user hashes, or even perform SMB Relay Attacks. Worst case, if systems are misconfigured, it could lead to user impersonation or even remote code execution—yikes!
Think of it like a mail carrier accepting a package addressed to one person but delivering it to anyone on the street without checking — that's how easily this vulnerability can expose sensitive data on your network. This vulnerability in the DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path without proper input validation, resulting in potential SMB network calls to another host from the Solr server.
An attacker could exploit this vulnerability to exfiltrate sensitive data, including OS user hashes, or even perform SMB Relay Attacks. Worst case, if systems are misconfigured, it could lead to user impersonation or even remote code execution—yikes! Upgrade Apache Solr to version 8.11.1 or later immediately. Ensure proper input validation is implemented, restricting the ability to input UNC paths. Regularly audit your network for proper SMB configurations to mitigate potential relay attacks. You’ve got the power to fix this! Follow these steps and keep your network safe. 🛡️