CVE-2021-29943: Apache Solr

Critical severity, CVSS 9.1. EPSS: 4.7% chance of exploitation in the next 30 days.

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

Affected products

• Apache Solr: before 8.8.2 (fixed in 8.8.2)

Published 2021-04-13. Last modified 2026-06-17.