CyberRota Analysis
AI-GeneratedApache Solr is vulnerable due to the extension's failure to restrict user-supplied search query parameters, allowing remote, unauthenticated attackers to exploit advanced Solr query syntax. This could lead to the enumeration of indexed field names and unauthorized extraction of stored values through various techniques. Organizations utilizing Apache Solr should prioritize addressing this vulnerability to mitigate potential data exposure risks.
Original NVD Description
The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A remote, unauthenticated attacker can use this syntax to enumerate indexed field names and extract their stored values through boolean- and range-based blind extraction techniques, independent of any site-specific configuration.