Security
فارسی
All products

org.opensearch.plugin:opensearch-security

Maven · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OpenSearch Issue with tenant read-only permissionsCVE-2023-45807 · GHSA-72Q2-GWWF-6HRV org.opensearch.plugin:opensearch-security Maven Medium Fix reported
Field-level security issue with .keyword fields in OpenSearchCVE-2023-23613 · GHSA-V3CG-7R9H-R2G6 org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch has ineffective TLS certificate hostname verificationGHSA-X5HG-X4GV-J98M org.opensearch.plugin:opensearch-security Maven Low Fix reported
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relationGHSA-X83W-23JP-G6PW org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch has a bypass of REST Layer Authorization Using Malformed PathsGHSA-83X9-VC3C-HGHC org.opensearch.plugin:opensearch-security Maven Low Fix reported
OpenSearch vulnerable to improper authorization for Rollover RequestsGHSA-22VX-2X23-98W6 org.opensearch.plugin:opensearch-security Maven Low Fix reported
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shapeGHSA-RRMM-WQ7Q-H4V5 org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch unauthorized data access on fields protected by field level security if field is a member of an objectGHSA-2RJV-CV85-XHGM org.opensearch.plugin:opensearch-security Maven Medium Fix reported
Issue with whitespace in JWT roles in OpenSearchCVE-2023-23612 · GHSA-864V-6QJ7-62QJ org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch uncontrolled resource consumptionGHSA-8WX3-324G-W4QQ org.opensearch.plugin:opensearch-security Maven High Fix reported
OpenSearch issue with fine-grained access control during extremely rare race conditionsCVE-2023-31141 · GHSA-G8XC-6MF7-H28H org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch has time discrepancy in authentication responsesCVE-2023-25806 · GHSA-C6WG-CM5X-RQVJ org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch has issue with fine-grained access control of indices backing data streamsCVE-2022-41918 · GHSA-WMX7-X4JP-9JGG org.opensearch.plugin:opensearch-security Maven Medium Fix reported
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive InformationCVE-2022-35980 · GHSA-F4QR-F4XX-HJXW org.opensearch.plugin:opensearch-security Maven High Fix reported