CVE-2019-12401: apache solr XML Entity Expansion
Vulnerability summary
CVE-2019-12401 is a high (CVSS 7.5) XML Entity Expansion vulnerability in apache solr. EPSS estimates a 8.55% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 10-09-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · MavenEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
8.55%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 8.55% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundDisclosures
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Apache1 product
- solrEOL1.3.0 to 1.4.1 | 3.1.0 to 3.6.2 | 4.0.0 to 4.10.4 | ≥ 1.3.0, ≤ 1.4.1 | ≥ 3.1, ≤ 3.6.2 | ≥ 4.0.0, ≤ 4.10.4
Org.apache.solr1 product
- solr-core< 5.0.0
2 vendors · 2 products
References
21 links- www.openwall.com/lists/oss-security/2019/09/10/1Mailing ListX Refsource MLISTThird Party AdvisoryWEB
Show all 21 references
- github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-12401-XML%20Bomb-Apache%20SolrX Refsource MISCExploitThird Party AdvisoryWEB
