[OFBIZ-12316] The Solr version included in OFBiz has an SSRF vulnerability (CVE-2021-27905)

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Trunk
• Fix Version/s: Release Branch 17.12, 18.12.01
• Component/s: solr
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 14/Sep/21 17:07
• Updated: 15/Sep/21 11:47
• Resolved: 15/Sep/21 08:40

Description

This security issue was reported to the security team by weinull orz <[e-mail]> As he suggested the solution is to update Solr to its last version. We did not create a CVE as it's actually a Solr issue and Solr has already created (CVE-2021-27905)