Miggo Logo
Miggo Vulnerability Database
→
CVE-2024-52012

CVE-2024-52012: Apache Solr Relative Path Traversal vulnerability

5.4

CVSS Score
3.1

Basic Information

CVE ID
CVE-2024-52012
GHSA ID
GHSA-4p5m-gvpf-f3x5
EPSS Score
0.77216%
CWE
CWE-23
Published
1/27/2025
Updated
1/27/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.apache.solr:solr-coremaven>= 6.6, < 9.8.09.8.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from improper path validation in the config.php upload API. The commit diff shows the vulnerable version resolved user-controlled filenames directly via Path.resolve() and wrote files without verifying containment within the configset directory. The patch added FileUtils.isPathAChildOfParent() validation to prevent path traversal. The affected function handles file uploads and contained the insecure path resolution logic prior to patching, making it the primary vulnerable entry point.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

R*l*tiv* P*t* Tr*v*rs*l vuln*r**ility in *p**** Solr. Solr inst*n**s runnin* on Win*ows *r* vuln*r**l* to *r*itr*ry *il*p*t* writ*-****ss, *u* to * l**k o* input-s*nit*tion in t** "*on*i*s*t uplo**" *PI.  *ommonly known *s * "zipslip", m*li*iously *

Reasoning

T** vuln*r**ility st*ms *rom improp*r p*t* v*li**tion in t** `*on*i*.p*p` uplo** *PI. T** *ommit *i** s*ows t** vuln*r**l* v*rsion r*solv** us*r-*ontroll** `*il*n*m*s` *ir**tly vi* `P*t*.r*solv*()` *n* wrot* *il*s wit*out v*ri*yin* *ont*inm*nt wit*in