CVE-2024-43794

🗓️ 23 Aug 2024 16:15:58Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 55 Views

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the OpenSearch software package lies in the ability to redirect users to unreliable websites, allowing attackers to redirect users to malicious sites.	14 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-43794	23 Aug 202419:38	–	circl
CNNVD	OpenSearch Dashboards Security Plugin 安全漏洞	23 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect	23 Aug 202416:15	–	cvelist
EUVD	EUVD-2024-40453	3 Oct 202520:07	–	euvd
NVD	CVE-2024-43794	23 Aug 202417:15	–	nvd
OSV	CVE-2024-43794 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect	23 Aug 202416:15	–	osv
Positive Technologies	PT-2024-7916 · Opensearch +2 · Opensearch Dashboards Security Plugin +2	23 Aug 202400:00	–	ptsecurity
Positive Technologies	PT-2025-17726 · Apache +2 · Apache Httpclient +3	6 Mar 202500:00	–	ptsecurity
Positive Technologies	PT-2025-6715 · Unknown +2 · Opensearch +3	12 Feb 202500:00	–	ptsecurity

Vulners

Node

opensearch-project security-dashboards-pluginRange<1.3.19

opensearch-project security-dashboards-pluginRange2.0.0–2.16.0

[
  {
    "vendor": "opensearch-project",
    "product": "security-dashboards-plugin",
    "versions": [
      {
        "version": "< 1.3.19",
        "status": "affected"
      },
      {
        "version": ">= 2.0.0, < 2.16.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/opensearch-project/security-dashboards-plugin/security/advisories/GHSA-3fph-6cqp-5mfc
github	www.github.com/opensearch-project/security-dashboards-plugin/commit/fc4f6a27c0c80881be9e8ed6b9259a25c3fa0e13

15 Apr 2026 00:35Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.00243

SSVC

CWE-601