[SOLR-16776] Disable remote streaming by default using sysprop

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Duplicate
• Assignee: David Smiley
• Reporter: Ishan Chattopadhyaya
• Created: 29/Apr/23 05:07
• Updated: 02/May/23 08:32
• Resolved: 02/May/23 05:51

Description

Remote streaming is a vulnerability in Solr that allows a user to make Solr talk to arbitrary HTTP servers. It is disabled by default, but easily enabled using config API. This issue is to disable it more properly, at a node level, and add an additional system property per node to disable it by default. To continue using this feature, pass -Denable.remote.streams=true to the startup, and then enable it on a per collection/configset basis as needed.

 

As per Skay's report https://twitter.com/Skay_00/status/1646870062601756672 remote code execution is possible in unsecured Solr clusters where authentication hasn't been enabled. This ticket is to mitigate one aspect of that, i.e. remote streaming. While our recommendation to all users remains the same, i.e. to secure Solr installations with authentication and authorization, I thank Skay for his detailed report.

Issue Links

• duplicates: SOLR-14853 Make enableRemoteStreaming option global; not configSet
• links to: GitHub Pull Request #1603