Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects exploitation attempts targeting CVE-2021-27905, an arbitrary file read and SSRF vulnerability affecting Apache Solr versions up to and including 8.8.1. The rule looks for specific patterns in HTTP request URIs that are indicative of this vulnerability being exploited, such as requests containing '/solr/', '/debug/dump?', 'param=ContentStream', or 'command=fetchindex' with 'masterUrl='.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
0031