CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess. The Solr Metrics API is protected by the "metrics-read" permission. Therefore, Solr Clouds with Authorization setup will only be vulnerable via users with the "metrics-read" permission. This issue affects Apache Solr: from 9.0.0 before 9.3.0. Users are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.

• CWE-200

• https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variablesVendor Advisory
• https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variablesVendor Advisory

Published

Jan 15, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50271 A potential security vulnerability has been identified with…7.5
• CVE-2023-50272A potential security vulnerability has been identified in HP…9.8
• CVE-2023-50274HPE OneView may allow command injection with local privilege…7.8
• CVE-2023-50275HPE OneView may allow clusterService Authentication Bypass r…7.5
• CVE-2023-5028A vulnerability, which was classified as problematic, has be…4.6
• CVE-2023-5029A vulnerability, which was classified as critical, was found…8.8
• CVE-2023-50291Insufficiently Protected Credentials vulnerability in Apache…7.5
• CVE-2023-50292Incorrect Permission Assignment for Critical Resource, Impro…7.5
• CVE-2023-50293Rejected reason: This is unused.
• CVE-2023-50294The App Settings (/admin/app) page in GROWI versions prior t…6.5
• CVE-2023-50297Open redirect vulnerability in PowerCMS (6 Series, 5 Series,…6.1
• CVE-2023-50298Exposure of Sensitive Information to an Unauthorized Actor v…7.5