Apache Solr has an insecure deserialization vulnerability. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted HTTP request to the Config
API. Successful exploitation could result in arbitrary code execution in the context of the server application.