Low
ghsa-x5hg-x4gv-j98m
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Medium
ghsa-x83w-23jp-g6pw
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
Low
ghsa-22vx-2x23-98w6
OpenSearch vulnerable to improper authorization for Rollover Requests
Low
ghsa-83x9-vc3c-hghc
OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
Medium
ghsa-2rjv-cv85-xhgm
OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object
Medium
ghsa-rrmm-wq7q-h4v5
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape
Medium
CVE-2023-45807
OpenSearch Issue with tenant read-only permissions
High
ghsa-8wx3-324g-w4qq
OpenSearch uncontrolled resource consumption
Medium
CVE-2023-31141
OpenSearch issue with fine-grained access control during extremely rare race conditions
Medium
CVE-2022-41918
OpenSearch has issue with fine-grained access control of indices backing data streams
Medium
CVE-2023-25806
OpenSearch has time discrepancy in authentication responses
Medium
CVE-2023-23613
Field-level security issue with .keyword fields in OpenSearch
Medium
CVE-2023-23612
Issue with whitespace in JWT roles in OpenSearch
High
CVE-2022-35980
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.