UpHeron
All vulnerabilities

Servers and applications

CVE-2023-50290

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined…

Severity
Medium 6.5
Published
15 Jan 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.3.0
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • From 9.0.0 before 9.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-50290
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-50290