CVE-2023-50292: Apache Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

{
  "id": "88c178b2cdab3119be89d1b88e51e24d98bf42f43d021b5982c2c7e1b3f0f521",
  "url": "https://solr.apache.org/cve-2023-50292-apache-solr-schema-designer-blindly-trusts-all-configsets-possibly-leading-to-rce-by-unauthenticated-users.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "CVE-2023-50292: Apache Solr Schema Designer blindly \"trusts\" all configsets, possibly leading to RCE by unauthenticated users",
    "summary": "Apache Solr’s Schema Designer did not account for configset trust, allowing unauthenticated users’ configsets to load external libraries in the Designer. Users are recommended to upgrade to fixed versions.",
    "evidence": "Since the Schema Designer loaded configSets without taking their \"trust\" into account, configSets that were created by unauthenticated users were allowed to load external libraries when used in the Schema Designer.",
    "products": [
      {
        "name": {
          "value": "Apache Solr",
          "evidence": "Apache Solr 6.0.0 through 8.11.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "8.11.3",
            "evidence": "Users are recommended to upgrade to version 8.11.3, 9.3.0 or later."
          },
          {
            "value": "9.3.0",
            "evidence": "Users are recommended to upgrade to version 8.11.3, 9.3.0 or later."
          }
        ],
        "affected_versions": [
          {
            "value": "from 8.10.0 through 8.11.2",
            "evidence": "This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0."
          },
          {
            "value": "from 9.0.0 before 9.3.0",
            "evidence": "This issue affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0."
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2023-50292",
        "evidence": "CVE - CVE-2023-50292"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-apache-solr-security",
  "document_id": 22979,
  "published_at": "2024-02-08T00:00:00+00:00"
}