peviitor-ro / solr

solr for peviitor.ro
1 stars 1 forks source link

RCS-RDS INFO ABUSE: TT#3022143072 IP: 86.124.12.221 #15

Closed sebiboga closed 4 months ago

sebiboga commented 4 months ago

Hello ,

You are receiving this email because LeakIX's NetworkGuardian has found a critical issue on your network.

If you are an hosting company, your cooperation on contacting the affected customer would be welcome and could help protect your network from abuse.

  |   -- | -- Source | http://86.124.12.221:443 Ip | 86.124.12.221 Discovered | 04 Mar 24 18:22 UTC Plugin | SolrVersionPlugin Reported to | abuse@rcs-rds.ro

Issue description

The following Solr instance is publicly accessible and looks out-dated :

It is critical to update to a safe version as soon as possible since multiple CVEs allow remote attackers to DoS or achieve RCE (Remote code execution) on the instance. Those vulnerabilities are currently used in ransomware campaign and could damage your network.

Reference:

Summary:

Found out-dated Solr version 9.1.1
Affected by CVE-2023-50386

Need help, have questions or are we hitting the wrong email address? Contact us at support@leakix.net, we'd love to help.

Yours truly,LeakIX

Hello , You are receiving this email because LeakIX's NetworkGuardian has found a critical issue on your network. If you are an hosting company, your cooperation on contacting the affected customer would be welcome and could help protect your network from abuse. Source http://86.124.12.221:443/ Ip 86.124.12.221 Discovered 04 Mar 24 18:22 UTC Plugin SolrVersionPlugin Reported to abuse@rcs-rds.ro Issue description The following Solr instance is publicly accessible and looks out-dated : It is critical to update to a safe version as soon as possible since multiple CVEs allow remote attackers to DoS or achieve RCE (Remote code execution) on the instance. Those vulnerabilities are currently used in ransomware campaign and could damage your network. Reference: https://www.cvedetails.com/cve/CVE-2023-50386 Summary: Found out-dated Solr version 9.1.1 Affected by CVE-2023-50386 Need help, have questions or are we hitting the wrong email address? Contact us at support@leakix.net, we'd love to help. Yours truly, LeakIX
andreireporter13 commented 4 months ago

This issue has been fixed. Closing the bug.