L3Yx

The issue is related to improper control of dynamically-managed code resources, unrestricted upload of files with dangerous types, and inclusion of functionality from untrusted control spheres in Apache Solr. This vulnerability allows an attacker to execute arbitrary code in the system. In the affected versions, Solr ConfigSets accepted Java jar and class files to be uploaded through the ConfigSets API. When backing up Solr Collections, these configSet files would be saved to disk when using the LocalFileSystemRepository. If the backup was saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the jar and class files would be available to use with any ConfigSet, trusted or untrusted. The vulnerability is limited to extending the Backup permissions with the ability to add libraries when Solr is run in a secure way with Authorization enabled.

The issue allows an authenticated user to retrieve sensitive configuration information when the `expose config` option is set to "non-sensitive-only". The `expose config` option is False by default. Approximately 39,118 devices may be affected.

The issue is related to a session fixation vulnerability in the Airflow web interface, allowing an authenticated user to continue accessing the webserver even after their password has been reset by an admin. This vulnerability can be exploited by a remote attacker to hijack a user's session. When using the database session backend, existing sessions of the user are invalidated when the password is reset. However, when using the securecookie session backend, sessions are not invalidated and require changing the secure key and restarting the webserver. Users resetting their passwords are informed about this with a flash message warning in the UI.

The issue is related to insufficient checking of user queries and restrictions of called script functions in Apache Jena, allowing a remote user to execute arbitrary javascript via a SPARQL query.

The issue is related to an Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.

The issue allows an anonymous user to read arbitrary files, including the database file, directly without logging in if anonymous read is enabled.

The issue allows users with write permissions to a repository to delete arbitrary directories. This is a problem because it can lead to data loss and potential system instability.

A vulnerability in Example Dags of Apache Airflow is related to incorrect management of code generation. This issue allows an attacker with UI access who can trigger DAGs to execute arbitrary commands via the manually provided `run id` parameter. The exploitation of this vulnerability may enable a remote attacker to execute arbitrary commands.

The issue concerns a part of a URL that was unnecessarily formatted, allowing for possible information extraction.