# CVE-2017-3164: Apache Solr SSRF in shards parameter

Source: https://junglewise.ai/threats/cve-2017-3164-apache-solr-ssrf-in-shards-parameter  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2019-03-14. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

CVE-2017-3164 · Severity: high · CVSS 7.5 · Published 2019-03-14

Apache Solr, a popular enterprise search platform, is vulnerable to a security flaw that allows attackers to force the server to make unauthorized web requests. This could be used to probe internal network services that are not normally accessible from the outside or to access sensitive data. Organizations using affected versions should update to a patched release to prevent potential data exposure or internal network reconnaissance.

Technologies: [Apache Solr](https://junglewise.ai/threats/technologies/solr), [org.apache.solr:solr-core (Maven)](https://junglewise.ai/threats/technologies/org-apache-solr-solr-core). Vendors: [Apache](https://junglewise.ai/threats/vendors/apache), [Maven](https://junglewise.ai/threats/vendors/maven).

## Quick answers

**Is CVE-2017-3164 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2017-3164 being exploited in the wild.

**How severe is CVE-2017-3164?** High severity, with a CVSS score of 7.5, published 14 March 2019.

**Which products and versions are affected?** Apache Solr >= 1.3.0, <= 7.6.0; org.apache.solr:solr-core (Maven) >= 1.3.0, <= 7.6.0, ECOSYSTEM:introduced=1.3.0,fixed=7.7.0.

**Is there a fix for CVE-2017-3164?** Yes. org.apache.solr:solr-core (Maven): upgrade to 7.7.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2017-3164 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2017-3164?** Check whether you run Apache Solr or org.apache.solr:solr-core (Maven) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- org.apache.solr:solr-core (Maven): upgrade to 7.7.0 or later

  ```sh
  # set org.apache.solr:solr-core to 7.7.0 in your pom.xml or build.gradle
  ```


## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache Solr's 'shards' parameter due to the lack of a whitelist mechanism for destination URLs. A remote, unauthenticated attacker can exploit this by sending a crafted request to the Solr server, forcing it to perform an HTTP GET request to any reachable URL, including internal network resources. This can lead to unauthorized information disclosure or internal port scanning. The vulnerability affects versions 1.3.0 through 7.6.0 and is resolved in version 7.7.0.

## Affected products

- Apache solr-core >= 1.3.0, <= 7.6.0

## Identifiers

- CVE-2017-3164
- GHSA-vrh8-27q8-fr8f

## Timeline

- 2019-03-14: advisory: GitHub Advisory published
- 2019-02-01: disclosed: Apache mailing list announcement
- 2019-02-11: patched: Version 7.7.0 released

## References

- [https://api.github.com/users/RainSignal](https://api.github.com/users/RainSignal)
- [https://github.com/RainSignal](https://github.com/RainSignal)
- [https://api.github.com/users/RainSignal/gists%7B/gist_id%7D](https://api.github.com/users/RainSignal/gists%7B/gist_id%7D)
- [https://api.github.com/users/RainSignal/repos](https://api.github.com/users/RainSignal/repos)
- [https://avatars.githubusercontent.com/u/101503193?v=4](https://avatars.githubusercontent.com/u/101503193?v=4)
- [https://api.github.com/users/RainSignal/events%7B/privacy%7D](https://api.github.com/users/RainSignal/events%7B/privacy%7D)

## Related threats

- [Apache Solr hardcoded credentials in Basic Authentication setup tool](https://junglewise.ai/threats/cve-2026-44825-apache-solr-hardcoded-credentials-in-basic-authentication-setup)
- [Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin](https://junglewise.ai/threats/cve-2026-22022-apache-solr-unauthorized-bypass-of-certain-predefined-permission)
- [Apache Solr: Insufficient file-access checking in standalone core-creation requests](https://junglewise.ai/threats/cve-2026-22444-apache-solr-insufficient-file-access-checking-in-standalone-core)
- [Apache Solr vulnerable to Execution with Unnecessary Privileges](https://junglewise.ai/threats/cve-2025-24814-apache-solr-vulnerable-to-execution-with-unnecessary-privileges)
- [Apache Solr Relative Path Traversal vulnerability](https://junglewise.ai/threats/cve-2024-52012-apache-solr-relative-path-traversal-vulnerability)