Lucene search
GitHub Advisory DatabaseGHSA-8699-M855-CWQFHistoryMay 14, 2022 - 2:51 a.m.
Cross-site scripting in Elasticsearch
2022-05-1402:51:14
CWE-79
GitHub Advisory Database
github.com
9
0.004 Low
EPSS
Percentile
72.2%
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.elasticsearch:elasticsearch | lt | 1.4.0.Beta1 |
References
packetstormsecurity.com/files/128556/Elasticsearch-1.3.x-CORS-Issue.html
www.elasticsearch.org/blog/elasticsearch-1-4-0-beta-released/
www.securityfocus.com/archive/1/533602/100/0/threaded
www.securityfocus.com/bid/70233
github.com/advisories/GHSA-8699-m855-cwqf
nvd.nist.gov/vuln/detail/CVE-2014-6439
www.elastic.co/community/security/
Related
nessus
nessus
openvas
openvas
Elasticsearch Cross-site Scripting (XSS) Vulnerability - Windows
2016-06-23 00:00:00
Elasticsearch Cross-site Scripting (XSS) Vulnerability - Linux
2016-06-28 00:00:00
securityvulns
securityvulns
Elasticsearch vulnerability CVE-2014-6439
2014-10-05 00:00:00
elasticsearch weak CORS policy
2014-10-05 00:00:00
osv
osv
Cross-site scripting in Elasticsearch
2022-05-14 02:51:14
prion
prion
Cross site scripting
2014-10-10 01:55:00
cvelist
cvelist
CVE-2014-6439
2014-10-10 01:00:00
freebsd
freebsd
cve
cve
CVE-2014-6439
2014-10-10 01:55:00