CVE-2023-50298 Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions

🗓️ 09 Feb 2024 17:29:07Reported by GoogleType

osv🔗 osv.dev👁 21 Views

Exposure of Sensitive Information to an Unauthorized Actor in Apache Solr version 6.0.0 through 8.11.2 and 9.0.0 before 9.4.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Solr affect watsonx.data	7 Feb 202510:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Solr Vulerabilities Affect IBM OpenPages	19 Aug 202418:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for March 2024 - Multiple CVEs addressed	9 Apr 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (June 2025)	19 Jun 202517:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Solr (lucene) affects IBM Operations Analytics - Log Analysis (CVE-2023-50386, CVE-2023-50298, CVE-2023-50292, CVE-2023-50291)	14 Apr 202508:13	–	ibm
BDU FSTEC	The vulnerability of the Apache Solr search server, related to the lack of protection for operational data, allows attackers to disclose protected information.	26 Mar 202400:00	–	bdu_fstec
Chainguard	CVE-2023-50298 vulnerabilities	9 Feb 202418:15	–	cgr
Circl	CVE-2023-50298	9 Feb 202419:26	–	circl
CNNVD	Apache Solr Security Vulnerability	9 Feb 202400:00	–	cnnvd
CNNVD	Apache Solr Security Vulnerability	9 Feb 202400:00	–	cnnvd

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/02/09/2
openwall	www.openwall.com/lists/oss-security/2024/02/09/3
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50298.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-50298
solr	www.solr.apache.org/security.html

08 Jul 2026 06:15Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.01564