Apache OFBiz - Arbitrary File Read (CVE-2022-47501)
Description
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack.
psychologyCrowdSec Analysis
CVE-2022-47501 is a vulnerability in Apache OFBiz related to the Solr plugin, enabling attackers to read arbitrary files on the server via a pre-authentication flaw.
CrowdSec has been tracking this vulnerability and its exploits since 25th of February 2025.
CrowdSec network data shows that most actors exploiting CVE-2022-47501 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. In addition, according to the CrowdSec network, attack volume against CVE-2022-47501 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.
Exploitation attempts are characterized by requests to URLs containing /solr/solrdefault/debug/dump?param=contentstreams&stream.url=file://.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2023-04-14 |
| Rule Released | 2025-02-25 |
| CrowdSec First Seen | 2025-02-25 |