{"cve":"CVE-2023-50292","nvd":{"published":"2024-02-09T18:15:08.363","modified":"2026-06-17T06:39:26.490","status":"Modified","description":"Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr.\n\nThis issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0.\n\nThe Schema Designer was introduced to allow users to more easily configure and test new Schemas and configSets.\nHowever, when the feature was created, the \"trust\" (authentication) of these configSets was not considered.\nExternal library loading is only available to configSets that are \"trusted\" (created by authenticated users), thus non-authenticated users are unable to perform Remote Code Execution.\nSince the Schema Designer loaded configSets without taking their \"trust\" into account, configSets that were created by unauthenticated users were allowed to load external libraries when used in the Schema Designer.\n\nUsers are recommended to upgrade to version 9.3.0, which fixes the issue.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5},"cwes":["CWE-732"],"references":["http://www.openwall.com/lists/oss-security/2024/02/09/3","https://solr.apache.org/security.html#cve-2023-50298-apache-solr-can-expose-zookeeper-credentials-via-streaming-expressions","http://www.openwall.com/lists/oss-security/2024/02/09/3","https://solr.apache.org/security.html#cve-2023-50298-apache-solr-can-expose-zookeeper-credentials-via-streaming-expressions"],"products":["apache:solr"],"source":"nvd","synced_at":"2026-10-19T21:45:59.823092188+00:00"},"epss":{"cve":"CVE-2023-50292","score":0.03024,"percentile":0.87466,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-4wxw-42wx-2wfx","url":"https://osv.dev/vulnerability/GHSA-4wxw-42wx-2wfx","summary":"Apache Solr Schema Designer blindly \"trusts\" all configsets","modified":"2024-12-06T05:31:59.608065Z","packages":[{"ecosystem":"Maven","name":"org.apache.solr:solr-core","purl":"pkg:maven/org.apache.solr/solr-core","ranges":[">=9.0.0 <9.3.0"],"fixed":["9.3.0"]},{"ecosystem":"Maven","name":"org.apache.solr:solr-core","purl":"pkg:maven/org.apache.solr/solr-core","ranges":[">=8.10.0 <8.11.3"],"fixed":["8.11.3"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}