Apache Solr SOLR-4882 Arbitrary File Read Fix

Key Vulnerability Information Vulnerability ID: SOLR-4882 Title: Restrict SolrResourceLoader to only classloader accessible files and instance dir Type: Improvement Priority: Major Affected Versions: 4.3 Component: None Labels: security Status: Resolved Resolution: Fixed Fixed Versions: 4.6, 6.0 Assignee: Uwe Schindler Reporter: Uwe Schindler Created: 30/May/13 20:03 Updated: 09/May/16 18:49 Resolved: 21/Sep/13 14:59 Description Issue: SolrResourceLoader allows loading files from any absolute path or relative path from the current working directory (CWD), serving as a fallback mechanism when resource lookup via classloader fails. Cause: This is a security-related issue. Certain Solr components allow resource paths (such as XSL stylesheets, Velocity templates, etc.) to be passed via REST parameters and loaded through the resource loader. This could lead to loading sensitive files like as stylesheets. Solution: The fallback mechanism should be restricted to only allow loading files from subdirectories within the instance directory. The special case for CWD should be removed. In version 4.4, a setting should be added to enable the old behavior, but it should be disabled by default unless existing installations require loading files outside the instance directory. Lucene 5.0 no longer supports this behavior. Attachments SOLR-4882.patch (14 kB, 21/Sep/13 14:33) SOLR-4882.patch (12 kB, 31/May/13 17:39) SOLR-4882.patch (10 kB, 31/May/13 12:34) Related Issues Depends on this issue: SOLR-5520 (Backport some security fixes from 4.x to 3.6.x branch, Resolved)

Goal Reached Thanks to every supporter — we hit 100%!

Apache Solr SOLR-4882 Arbitrary File Read Fix