CVE-2023-50292

highpriority · track · 31EPSS 0.030 · 87 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

3.02% (87th) EPSS

CVSS 7.5 · high

Is it mine?

19 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configure and test new Schemas and configSets. However, when the feature was created, the "trust" (authentication) of these configSets was not considered. External library loading is only available to configSets that are "trusted" (created by authenticated users), thus non-authenticated users are unable to perform Remote Code Execution. Since the Schema Designer loaded configSets without taking their "trust" into account, configSets that were created by unauthenticated users were allowed to load external libraries when used in the Schema Designer. Users are recommended to upgrade to version 9.3.0, which fixes the issue.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondaryexploitability 3.9 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-732USCWE-732USCWE-732US

affected products (19)

Products and version ranges known to be affected.

Apache Solr <8.11.3all versionscert_bundDE
Apache Solr <9.3.0all versionscert_bundDE
IBM Operational Decision Manager 8.10.xall versionscert_bundDEcpe:/a:ibm:operational_decision_manager:8.10.x
IBM Operational Decision Manager 8.11.xall versionscert_bundDEcpe:/a:ibm:operational_decision_manager:8.11.x
IBM Operational Decision Manager 8.12.xall versionscert_bundDEcpe:/a:ibm:operational_decision_manager:8.12.x
IBM QRadar SIEM <7.5.0 UP12all versionscert_bundDE
Apache Solr< 8.11.3cert_bundDE
Apache Solr< 9.3.0cert_bundDE
IBM QRadar SIEM< 7.5.0 UP12cert_bundDE
Apache Software Foundation Apache Solr≤ 8.10.0 ≤8.11.2enisa_euvdEU
Apache Software Foundation Apache Solr9.0.0 → 9.3.0enisa_euvdEU
Apache Software Foundation Solr6.0.0 → 8.11.3fstec_bduRU
Apache Software Foundation Solr9.0.0 → 9.3.0fstec_bduRU
apache solr6.0.0 → 8.11.3nvdUScpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*
apache solr9.0.0 → 9.4.1nvdUScpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*
Bitnami solr6.0.0 → 8.11.3osvUSpkg:bitnami/solr
Bitnami solr9.0.0 → 9.4.1osvUSpkg:bitnami/solr
Maven org.apache.solr:solr-core8.10.0 → 8.11.3osvUSpkg:maven/org.apache.solr/solr-core
Maven org.apache.solr:solr-core9.0.0 → 9.3.0osvUSpkg:maven/org.apache.solr/solr-core

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2024-0340Apache Solr: Mehrere SchwachstellenDeutsch2024-02-11csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Solr ausnutzen, um Informationen offenzulegen oder beliebigen Programmcode auszuführen.
GHSA-4wxw-42wx-2wfxApache Solr Schema Designer blindly "trusts" all configsets2024-02-09ghsa · osvUS
Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configure and test new Schemas and configSets. However, when the feature was created, the "trust" (authentication) of these configSets was not considered. External library loading is only available to configSets that are "trusted" (created by authenticated users), thus non-authenticated users are unable to perform Remote Code Execution. Since the Schema Designer loaded configSets without taking their "trust" into account, configSets that were created by unauthenticated users were allowed to load external libraries when used in the Schema Designer. Users are recommended to upgrade to version 9.3.0 or 8.11.3, both of which fix the issue.
BIT-solr-2023-50292Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users2024-03-06vendor · osvUS
Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0. The Schema Designer was introduced to allow users to more easily configure and test new Schemas and configSets. However, when the feature was created, the "trust" (authentication) of these configSets was not considered. External library loading is only available to configSets that are "trusted" (created by authenticated users), thus non-authenticated users are unable to perform Remote Code Execution. Since the Schema Designer loaded configSets without taking their "trust" into account, configSets that were created by unauthenticated users were allowed to load external libraries when used in the Schema Designer. Users are recommended to upgrade to version 9.3.0, which fixes the issue.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund nvd NVD CVE.org MITRE

published 2024-02-09modified 2026-06-17

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan