CVE-2019-0193
HighPublished
Apache Solr DataImportHandler Code Injection Vulnerability
- Published
- Aug 1, 2019
- Updated
- Oct 21, 2025
- Assigning CNA
- apache
- Evidence observed
- Dec 10, 2021
Primary CVSS
7.2/ 10High
Apache Solr DataImportHandler Code Injection Vulnerability
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.
solr/CVE-2019-0193
Apache Solr Remote Command Execution (CVE-2019-0193)
http/cves/2019/CVE-2019-0193.yaml
Apache Solr远程代码执行漏洞(CVE-2019-0193) Exploit
Apache Solr DataImport Handler RCE
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
ApacheSolrRCE（CVE-2019-0193）一键写shell，原理是通过代码执行的java文件流写的马。
Proof-of-concept exploit for CVE-2019-0193 targeting Apache Solr's DataImportHandler, enabling remote code execution via crafted XML data sources with reverse shell payload.
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.
Proof-of-concept exploit for CVE-2019-0193, a remote code execution vulnerability in Apache Solr, enabling authenticated attackers to execute arbitrary commands via the DataImportHandler.