{"schema":"vulnpedia.poc/1","cve":"CVE-2019-17558","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2021-11-03","ransomware":false},"epss":{"score":0.98567,"percentile":0.99922},"cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solr_velocity_rce.rb","executable":true,"sourceId":"exploit/multi/http/solr_velocity_rce","description":"Apache Solr Remote Code Execution via Velocity Template","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:58:04 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/solr_velocity_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solr_velocity_rce.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/solr_velocity_rce","modified":"2026-04-22 11:58:04 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solr_velocity_rce.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7bb322405f10","executable":false,"sourceId":"7bb322405f10","verification":"catalogued","source":"vulncheck-kev","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7bb322405f10","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/xdb/7bb322405f10"}],"repositoryUrl":"https://github.com/zhzyker/exphub"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/6918ed306441","executable":false,"sourceId":"6918ed306441","verification":"catalogued","source":"vulncheck-kev","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6918ed306441","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/xdb/6918ed306441"}],"repositoryUrl":"https://github.com/Ma1Dong/Solr_CVE-2019-17558"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/66f599e68bd2","executable":false,"sourceId":"66f599e68bd2","verification":"catalogued","source":"vulncheck-kev","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"66f599e68bd2","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/xdb/66f599e68bd2"}],"repositoryUrl":"https://github.com/CyberCTF/vulhub-solr-cve-2019-17558"},{"kind":"exploitdb","id":"47572","url":"https://www.exploit-db.com/exploits/47572","code":"https://www.exploit-db.com/download/47572","executable":true},{"kind":"exploitdb","id":"48338","url":"https://www.exploit-db.com/exploits/48338","code":"https://www.exploit-db.com/download/48338","executable":true}],"poc_candidates":[{"url":"https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool","source":"poc-in-github","sourceId":"CVE-2019-17558","description":"CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.","modified":"2025-12-12T03:59:28Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2019-17558","url":"https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool"},{"source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2025-12-12T03:59:28Z","url":"https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool"}],"tags":[]},{"url":"https://github.com/zhzyker/exphub","source":"poc-in-github","sourceId":"CVE-2019-17558","description":"Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340","modified":"2026-10-23T08:01:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2019-17558","url":"https://github.com/zhzyker/exphub"},{"source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2026-10-23T08:01:06Z","url":"https://github.com/zhzyker/exphub"}],"tags":[]},{"url":"https://github.com/Ma1Dong/Solr_CVE-2019-17558","source":"poc-in-github","sourceId":"CVE-2019-17558","description":"Solr_CVE-2019-17558","modified":"2021-09-15T09:34:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2019-17558","url":"https://github.com/Ma1Dong/Solr_CVE-2019-17558"},{"source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2021-09-15T09:34:12Z","url":"https://github.com/Ma1Dong/Solr_CVE-2019-17558"}],"tags":[]},{"url":"https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE","source":"poc-in-github","sourceId":"CVE-2019-17558","description":"Apache Solr 1.4 Injection to get a shell","modified":"2020-12-15T04:40:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2019-17558","url":"https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE"},{"source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2020-12-15T04:40:53Z","url":"https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE"}],"tags":[]},{"url":"https://github.com/rogerzeferino/cve-2019-17558-apache-solr-rce","source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2026-08-10T22:35:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2019-17558","url":"https://github.com/rogerzeferino/cve-2019-17558-apache-solr-rce"},{"source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2026-08-10T22:35:09Z","url":"https://github.com/rogerzeferino/cve-2019-17558-apache-solr-rce"}],"tags":[]},{"url":"https://github.com/CyberCTF/vulhub-solr-cve-2019-17558","source":"poc-in-github","sourceId":"CVE-2019-17558","description":"Vulhub solr/CVE-2019-17558: Apache Solr Velocity Template RCE (CVE-2019-17558), run with Isoloom","modified":"2026-10-20T07:41:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2019-17558","url":"https://github.com/CyberCTF/vulhub-solr-cve-2019-17558"},{"source":"poc-in-github","sourceId":"CVE-2019-17558","modified":"2026-10-20T07:41:02Z","url":"https://github.com/CyberCTF/vulhub-solr-cve-2019-17558"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2019-17558 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2019-17558 && searchsploit -m 47572","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2019-17558 && searchsploit -m 48338","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2019-17558/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17558.yaml","template":"http/cves/2019/CVE-2019-17558.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2019-17558%22&type=repositories","executable":false}]}