CVE-2021-37940

2021-12-0718:59:29

CWE-918

elastic

www.cve.org

information disclosure

ghes integration

server-side request forgery

workplace search admin

publicly accessible hosts

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.

CNA Affected

[
  {
    "product": "Enterprisesearch",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "before 7.16.0"
      }
    ]
  }
]

References

discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146