Re: Solr shutdown everyday at 11:34:06Z

2025-01-26 Thread Alexandre Rafalovitch
Network setup? Has a firewall appliance? It may drop the connection if there is no traffic for a while. E.g. between the nodes. That may cause all sorts of fun events. And if you were watching it and maybe doing some test requests, that resets the timeout value. Something like wireshark may catch

Re: Solr shutdown everyday at 11:34:06Z

2025-01-26 Thread Yaşar Arabacı
Checking the task scheduler and system event logs didn't reveal anything interesting. I also ran procmon during the time it was supposed to shutdown, but it didn't shut down this time. I think this is one of those quantum bugs that only exists when not observed. I will run procmon again tomorrow a

CVE-2025-24814: Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files

2025-01-26 Thread Jason Gerlowski
Severity: moderate Affected versions: - Apache Solr through 9.7 Description: Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemConfigSetService" component (the default in "standalone" or "user-managed" mode

CVE-2024-52012: Apache Solr: Configset upload on Windows allows arbitrary path write-access

2025-01-26 Thread Jason Gerlowski
Severity: moderate Affected versions: - Apache Solr 6.6 through 9.7.0 Description: Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API.  Comm