CVE Tools
Sign in

CVE-2023-50290

Apache Solr: Host environment variables are published via the Metrics API

Published: Jan 15, 2024Updated: May 9, 2025 Sources: CVE List NVD GHSA BDUCWE-200
6.5MEDIUM
NVD MITRE
EPSS Score
68.4%
Top 0.7%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
Patch Available
Self-Check
Nuclei · OpenVAS

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess. The Solr Metrics API is protected by the "metrics-read" permission. Therefore, Solr Clouds with Authorization setup will only be vulnerable via users with the "metrics-read" permission. This issue affects Apache Solr: from 9.0.0 before 9.3.0. Users are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.

No summary for this CVE yet.

CVSS Vector Breakdown

AV:NAC:LPR:LUI:NS:UC:HI:NA:N
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:LPrivileges Required
Low
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:NIntegrity
None
A:NAvailability
None
Open in CVSS calculator →

Weaknesses

CWE-200NVD-CWE-noinfo

Affected Products

Apache Software Foundation
oss-project·USaka apache foundation
Apache SolrOn-premWeb App
Web & CMS Plugins
SolrOn-premLibrary
OSS Libraries / generic-library
Maven
package-ecosystem
org.apache.solr:solr-core
OSS Libraries
apache
oss-project·USaka apache http server, apache httpd
solrOn-premWeb App
Web & CMS Plugins / cms-core

Exploitability

Official Patch Available
Is your org exposed to CVE-2023-50290?We'll check your whole external perimeter for exposure — free. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

1 technique
Collection
View detailed technique mapping

References

https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variables
solr.apache.org
https://nvd.nist.gov/vuln/detail/CVE-2023-50290
nvd.nist.gov
https://github.com/apache/solr/commit/35fc4bdc48171d9a64251c54a1e76deb558cf9d8
github.com
and 4 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2023-50290 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows