Advisory 2021-05/3 Security Issues in Apache Solr 8.8.1
Potential Threat of Unauthorized Access in FileCloud
|Security Advisory Date||May 18, 2021|
|Vulnerability Type||Potential unauthorized access|
|Versions affected||FileCloud Version 20.3.3|
|Version fixed||FileCloud Version 220.127.116.1181|
The Apache Solr version included in FileCloud on-premises installations contained security vulnerabilities of high severity. These flaws potentially allowed attackers to gain unauthorized access to secure information or to perform malicious actions.
See the descriptions of the following CVEs at https://solr.apache.org/security.html for information about the specific Apache Solr issues causing these threats:
This has been fixed in FileCloud version 18.104.22.16881, which includes the updated version of Apache Solr, 8.8.2.
What you should do
- If you are using a FileCloud on-premises installation, please update it to the latest version, which is 22.214.171.12481 or greater.
- If you are using FileCloud online, you are not affected.
If you have any questions about this advisory, please contact FileCloud support.