Executive Summary

The vulnerability exists in the Goobi viewer web application versions from 4.8.0 up to but not including 26.04.1. The REST endpoint POST /api/v1/index/stream accepts an arbitrary Solr streaming expression from unauthenticated network clients and forwards it directly to the backend Solr server without any restrictions.

This means that an attacker can send specially crafted requests to this endpoint to execute arbitrary Solr streaming expressions, potentially allowing them to read the entire Solr index.

In default Solr deployments, this can also enable the attacker to modify or delete indexed records.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have severe impacts including unauthorized access to sensitive indexed data stored in the Solr server.

An attacker could read confidential information from the Solr index, which may include sensitive or private data.

Additionally, the attacker could modify or delete indexed records, leading to data integrity issues, loss of data, or disruption of services relying on the Solr index.

Because the vulnerability can be exploited remotely without authentication, it poses a high risk to systems using vulnerable versions of the Goobi viewer.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade the Goobi viewer to version 26.04.1 or later, where the issue is fixed.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthenticated attackers to read, modify, or delete the complete Solr index used by the Goobi viewer application. This could lead to unauthorized access to sensitive data and data integrity issues.

Such unauthorized access and potential data manipulation could result in non-compliance with data protection regulations like GDPR and HIPAA, which require strict controls over access to personal and sensitive information as well as ensuring data integrity and confidentiality.

Useful 0 Not Useful 0