Home

Usage of velocity annotation

Velocity annotation usage includes adding explanatory text, temporarily removing code snippets, debugging and testing, etc. If you want to know more about the usage of velocity annotations, you can visit the articles below this topic.

164

velocity solr velocity

Table of Contents

Usage of velocity annotation

How to use velocity annotation

Velocity annotation usage includes adding explanatory text, temporarily removing code snippets, debugging and testing, etc.

Dec 08, 2023 pm 01:53 PM

velocity

Example analysis of Apache Solr velocity template injection RCE vulnerability

0x01 Introduction Solr is an independent enterprise-level search application server that provides an API interface similar to Web-service. Users can submit XML files in a certain format to the search engine server through http requests to generate indexes; they can also make search requests through HttpGet operations and get returned results in XML format. 0x02 Vulnerability Introduction The VelocityResponseWriter component exists in Solr. An attacker can construct a specific request to modify the relevant configuration, so that the VelocityResponseWriter component allows loading of the specified template, which in turn leads to the Velocity template injection remote command execution vulnerability. The attacker exploits this

May 19, 2023 am 10:37 AM

solr velocity

What aspects does velocity syntax include?

Velocity syntax includes: 1. Script instructions, Velocity uses the "#" symbol to identify script instructions; 2. Variable references, Velocity uses the "" symbol to identify variable references; 3. Loop structures, Velocity supports loop structures; 4. Function calls, Velocity supports calling Java methods or custom methods; 5. Import and export, Velocity supports import and export templates.

Oct 10, 2023 pm 02:52 PM

velocity