{"action":"Upgrade org.apache.solr:solr-core to 9.3.0 or later.","affected":[{"fixed":"9.3.0","introduced":"9.0.0"}],"component":"org.apache.solr:solr-core","cve_ids":["CVE-2023-50290"],"ecosystem":"Maven","epss":0.68446,"exploited":false,"fixed_versions":["9.3.0"],"ghsa_id":"GHSA-gg7w-pw2r-x2cq","id":"tcs_01M5N8Y7MB6Q36G81HQNQVZQ5Z","modified_at":"2024-02-16T08:19:52.100752Z","published_at":"2024-01-15T12:30:19Z","references":["https://osv.dev/vulnerability/GHSA-gg7w-pw2r-x2cq","https://nvd.nist.gov/vuln/detail/CVE-2023-50290","https://github.com/apache/solr/commit/35fc4bdc48171d9a64251c54a1e76deb558cf9d8","https://github.com/apache/lucene-solr","https://issues.apache.org/jira/browse/SOLR-16808","https://solr.apache.org/security.html#cve-2023-50290-apache-solr-allows-read-access-to-host-environment-variables"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-gg7w-pw2r-x2cq","url":"https://osv.dev/vulnerability/GHSA-gg7w-pw2r-x2cq"}],"summary":"Apache Solr allows read access to host environmet variables"}