What happened
The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.
Affected versions
Solr: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 47572Apache Solr 8.2.0 - Remote Code Execution@l3x_wong2019-11-01VerifiedExploit-DB 48338Apache Solr - Remote Code Execution via Velocity Template (Metasploit)Metasploit2020-04-16VerifiedPoC-in-GitHub · thelostworldFree/CVE-2019-17558_Solr_Vul_ToolCVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.★ 1thelostworldFree2020-03-27CandidatePoC-in-GitHub · zhzyker/exphubExphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340★ 4292zhzyker2020-04-01CandidatePoC-in-GitHub · Ma1Dong/Solr_CVE-2019-17558Solr_CVE-2019-17558★ 2Ma1Dong2020-08-04CandidatePoC-in-GitHub · xkyrage/Exploit_CVE-2019-17558-RCEApache Solr 1.4 Injection to get a shell★ 0xkyrage2020-12-15CandidatePoC-in-GitHub · rogerzeferino/cve-2019-17558-apache-solr-rce★ 1rogerzeferino2026-02-16CandidatePoC-in-GitHub · CyberCTF/vulhub-solr-cve-2019-17558Vulhub solr/CVE-2019-17558: Apache Solr Velocity Template RCE (CVE-2019-17558), run with Isoloom★ 0CyberCTF2026-10-08CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.