Elasticsearch 8.9.1 / 7.17.13 Security Update

Elasticsearch StackOverflow vulnerability ESA-2023-14 A flaw was discovered in Elasticsearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. Affected Versions: Elasticsearch versions from 7.0.0 to 7.17.12 and fr...

PT-2023-5274 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: A flaw was discovered in Elasticsearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service. The...

Elasticsearch Security Statement regarding CVE-2022-1471

Elasticsearch is not affected by this issue. Elasticsearch is not affected by the issue described in CVE-2022-1471 as, in general, it does not use Snakeyaml to parse YAML. Summary Elasticsearch supports YAML as a format for search queries, and it also uses YAML for its configuration files i.e...

CVE-2023-31417

A flaw was found in the Elasticsearch package. Elasticsearch filters out sensitive information and credentials before logging into the audit log. It was found that this filtering was not applied when requests to Elasticsearch use certain deprecated URIs for APIs. As a result, sensitive informatio...

Metasploit Weekly Wrap-Up

New module content 4 Roundcube TimeZone Authenticated File Disclosure Authors: joel, stonepresto, and thomascube Type: Auxiliary Pull request: 18286 contributed by cudalac Path: auxiliary/gather/roundcubeauthfileread AttackerKB reference: CVE-2017-16651 Description: This PR adds a module to...

Metasploit Weekly Wrap-Up

Pumpkin Spice Modules Here in the northern hemisphere, fall is on the way: leaves changing, the air growing crisp and cool, and some hackers changing the flavor of their caffeine. This release features a new exploit module targeting Apache NiFi as well as a new and improved library to interact wi...

Malicious code in mmolecule-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4066df1016d7aee5ec19b765089b99b9b47513327cbbe8afe20985bb3fbda37b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7968 Malicious code in mmolecule-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4066df1016d7aee5ec19b765089b99b9b47513327cbbe8afe20985bb3fbda37b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Elasticsearch Enumeration Utility

This module enumerates Elasticsearch instances. It uses the REST API in order to gather information about the server, the cluster, nodes, in the cluster, indices, and pull data from those indices. Module Options msf use auxiliary/gather/elasticsearchenum msf auxiliaryelasticsearchenum show action...

Information Exposure

Overview logstash-core is a scalable log and event management tool. Affected versions of this package are vulnerable to Information Exposure. Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information. Remediation Upgrade logstash-core to...

GHSA-HR8G-6V94-X4M9 vulnerabilities

Vulnerabilities for packages: druid, gradle, tez, elasticsearch...

CVE-2023-33201 vulnerabilities

Vulnerabilities for packages: druid, gradle, tez, elasticsearch...

Vulnerability fixed in Elasticsearch

Elastic has fixed a vulnerability in Elasticsearch. A malicious party could exploit the vulnerability to cause a denial-of-service attack. Elastic has released updates to fix the vulnerability in Elasticsearch 8.8.2 and 7.17.11. For more information, see: https://discuss.elastic.co/t...

GHSA-7G45-4RM6-3MM3 vulnerabilities

Vulnerabilities for packages: maven-stage0, cassandra-reaper, hadoop-fips, gradle, spdx-tools-java, trino, hadoop-client-modules, spark-fips, celeborn...

CVE-2023-2976 vulnerabilities

Vulnerabilities for packages: maven-stage0, cassandra-reaper, hadoop-fips, gradle, spdx-tools-java, trino, hadoop-client-modules, spark-fips, celeborn...

GHSA-493P-PFQ6-5258 vulnerabilities

Vulnerabilities for packages: elasticsearch, sonarqube-10, thingsboard, hadoop-fips, druid, hadoop-client-modules, celeborn...

CVE-2023-1370 vulnerabilities

Vulnerabilities for packages: elasticsearch, sonarqube-10, thingsboard, hadoop-fips, druid, hadoop-client-modules, celeborn...

Amazon Linux 2023 : rsyslog, rsyslog-crypto, rsyslog-elasticsearch (ALAS2023-2023-001)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-001 advisory. A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, or a remote attacker able to connect to the rsyslog port, could use...

Arbitrary Code Execution

elastic/elasticsearch is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a redirect issue that leads to a user being redirected to an arbitrary website if they use a maliciously crafted kibana url...

K34074377: BIG-IQ HA vulnerability CVE-2021-22997

Security Advisory Description BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. CVE-2021-22997 Impact BIG-IQ The vulnerability could result in a confidential...