Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•9 views

CVE-2025-12149: Exposure of Sensitive Information to an Unauthorized Actor

In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security DLS is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices...

6CVSS5.8AI score0.00303EPSS
SaveExploits0References3
Rows per page
Query Builder