CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

🗓️ 09 Feb 2024 17:29:21Reported by apacheType

Apache Solr Schema Designer trusts all configsets, leading to RCE vulnerabilit

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Solr affect watsonx.data	7 Feb 202510:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Solr Vulerabilities Affect IBM OpenPages	19 Aug 202418:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for March 2024 - Multiple CVEs addressed	9 Apr 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (June 2025)	19 Jun 202517:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Solr (lucene) affects IBM Operations Analytics - Log Analysis (CVE-2023-50386, CVE-2023-50298, CVE-2023-50292, CVE-2023-50291)	14 Apr 202508:13	–	ibm
BDU FSTEC	The vulnerability of the Apache Solr search server, related to the lack of protection for operational data, allows attackers to disclose protected information.	26 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Apache Solr search server, related to the incorrect assignment of permissions for the critical resource, allows a violator to execute arbitrary code.	26 Mar 202400:00	–	bdu_fstec
Chainguard	CVE-2023-50298 vulnerabilities	9 Feb 202418:15	–	cgr
Circl	CVE-2023-50292	9 Feb 202419:26	–	circl
Circl	CVE-2023-50298	9 Feb 202419:26	–	circl

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Solr",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "8.11.2",
        "status": "affected",
        "version": "8.10.0",
        "versionType": "semver"
      },
      {
        "lessThan": "9.3.0",
        "status": "affected",
        "version": "9.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/02/09/3
solr	www.solr.apache.org/security.html

09 Feb 2024 17:30Current

8High risk

Vulners AI Score8

EPSS0.0305

CWE-732