{"uuid": "04fa44bb-311b-4e76-835c-21ca878d11f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50386", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_solr_backup_restore.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"l3yx\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1 is affected by an Unrestricted Upload of File\\n          with Dangerous Type vulnerability which can result in remote code execution in the context of the user running\\n          Apache Solr. When Apache Solr creates a Collection, it will use a specific directory as the classpath and load\\n          some classes from it. The backup function of the Collection can export malicious class files uploaded by\\n          attackers to the directory, allowing Solr to load custom classes and create arbitrary Java code. Execution\\n          can further bypass the Java sandbox configured by Solr, ultimately causing arbitrary command execution.\", \"disclosure_date\": \"2024-02-24\", \"fullname\": \"exploit/linux/http/apache_solr_backup_restore\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Apache Solr Backup/Restore APIs RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/apache_solr_backup_restore.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/apache_solr_backup_restore\", \"references\": [\"URL-https://xz.aliyun.com/t/13637?time__1311=mqmxnQ0QiQi%3DDtKDsD7md0%3DnxeqjghDMxTD\", \"URL-https://github.com/rapid7/metasploit-framework/issues/18919\", \"URL-https://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\", \"CVE-2023-50386\"], \"rport\": 8983, \"session_types\": false, \"targets\": [\"Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:22.186444Z"}