CVE-2021-29262

CVE-2021-29262 is a high-severity vulnerability affecting Apache Solr versions prior to 8.8.2. It allows unauthorized access to sensitive security.json data when specific ZkACLProviders are configured without an existing security.json znode, or when ACLs are not automatically updated. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low complexity, leading to high confidentiality impact without requiring user interaction. While its EPSS score suggests a higher-than-average likelihood of exploitation, there is currently no evidence of active exploitation, public exploit code, or significant community discussion or media coverage.