Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•1 views

CVE-2025-12149: Exposure of Sensitive Information to an Unauthorized Actor

In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security DLS is correctly enforced elsewhere, when the search is triggered from a Signals watch, the DLS rule is not enforced, allowing access to all documents in the queried indices...

6CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Rows per page
Query Builder