alert http any any -> $HOME_NET any (msg:"ET INFO Apache Solr System Information Request"; flow:established,to_server; http.uri; content:"/solr/admin/info/system"; reference:url,www.exploit-db.com/exploits/47572; reference:url,web.archive.org/web/20190718141548/https://www.agarri.fr/blog/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html; classtype:misc-activity; sid:2031504; rev:4; metadata:affected_product Apache_Solr, attack_target Web_Server, created_at 2021_01_08, deployment Perimeter, confidence High, signature_severity Informational, updated_at 2026_01_20;)