vulnti.work

Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability

Critical Listed in CISA KEV
CVECVE-2019-17558
First seen2021-11-03 00:00 UTC
Disclosed2021-11-03 00:00 UTC
Last updated2026-07-18 02:00 UTC
Channel statuspending_review

Summary

The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Apache:Solr

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_added CISA KEV
  2. kev_ingest CISA KEV