Merge pull request #607 from doyensec:cve-2019-0192

PiperOrigin-RevId: 807294734
Change-Id: I7241610bb22220ad6e6b41fecb21c0490f60d6f2

Author: copybara-github

doyensec/detectors/cve_2019_0192_apache_solr_unsafe_deserialization/README.md

@@ -0,0 +1,28 @@
+# Apache Solr Unsafe Deserialization (CVE-2019-0192)
+
+## Description
+
+In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows
+attackers to configure the JMX server via an HTTP POST request. By directing it
+to a malicious RMI server, this vulnerability can be exploited to trigger unsafe
+deserialization, leading to remote code execution on the Solr server.
+
+## Affected Versions
+
+-   5.0.0 to 5.5.5
+-   6.0.0 to 6.6.5
+
+## References
+
+-   [Redhat Advisory](https://access.redhat.com/security/cve/CVE-2019-0192)
+-   [Bug Tracker](https://bugzilla.redhat.com/show_bug.cgi?id=1692345)
+
+## Build jar file for this plugin
+
+Using `gradlew`:
+
+```shell
+./gradlew jar
+```
+
+The Tsunami identifiable jar file is located at `build/libs` directory.

doyensec/detectors/cve_2019_0192_apache_solr_unsafe_deserialization/build.gradle

@@ -0,0 +1,41 @@
+plugins {
+    id 'java-library'
+}
+
+description = 'Apache Solr Unsafe Deserialization (CVE-2019-0192)'
+group = 'com.google.tsunami'
+version = '0.0.1-SNAPSHOT'
+
+repositories {
+    maven { // The google mirror is less flaky than mavenCentral()
+        url 'https://maven-central.storage-download.googleapis.com/repos/central/data/'
+    }
+    mavenCentral()
+    mavenLocal()
+}
+
+def coreRepoBranch = System.getenv("GITBRANCH_TSUNAMI_CORE") ?: "stable"
+def tcsRepoBranch = System.getenv("GITBRANCH_TSUNAMI_TCS") ?: "stable"
+
+dependencies {
+    implementation("com.google.tsunami:tsunami-common") {
+      version { branch = "${coreRepoBranch}" }
+    }
+    implementation("com.google.tsunami:tsunami-plugin") {
+      version { branch = "${coreRepoBranch}" }
+    }
+    implementation("com.google.tsunami:tsunami-proto") {
+      version { branch = "${coreRepoBranch}" }
+    }
+
+    implementation 'org.jsoup:jsoup:1.9.2'
+
+    testImplementation "com.google.inject:guice:6.0.0"
+    testImplementation "com.google.inject.extensions:guice-testlib:6.0.0"
+    testImplementation "com.google.truth:truth:1.4.4"
+    testImplementation "com.google.truth.extensions:truth-java8-extension:1.4.4"
+    testImplementation "com.google.truth.extensions:truth-proto-extension:1.4.4"
+    testImplementation "com.squareup.okhttp3:mockwebserver:3.12.0"
+    testImplementation "junit:junit:4.13.2"
+    testImplementation "org.mockito:mockito-core:5.18.0"
+}

doyensec/detectors/cve_2019_0192_apache_solr_unsafe_deserialization/settings.gradle

@@ -0,0 +1,12 @@
+rootProject.name = 'cve-2019-0192-apache-solr-unsafe-deserialization'
+
+def coreRepository = System.getenv("GITREPO_TSUNAMI_CORE") ?: "https://github.com/google/tsunami-security-scanner.git"
+def tcsRepository = System.getenv("GITREPO_TSUNAMI_TCS") ?: "https://github.com/google/tsunami-security-scanner-callback-server.git"
+
+sourceControl {
+    gitRepository("${coreRepository}") {
+        producesModule("com.google.tsunami:tsunami-common")
+        producesModule("com.google.tsunami:tsunami-plugin")
+        producesModule("com.google.tsunami:tsunami-proto")
+    }
+}