Field Assessment
AI analysis pending.
CVE
CVE-2017-3164
Severity
HIGH
CVSS
7.5
EPSS
19.44%
Apache
Original Filing — NVD Description
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.