BIT-ELASTICSEARCH-2022-23708

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “” index permissions access to this index...

BIT-ELASTICSEARCH-2022-23712

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request...

BIT-ELASTICSEARCH-2023-31417 Elasticsearch Insertion of sensitive information in audit logs

Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this filtering was not applied when requests to Elasticsearch use certain deprecated URIs for APIs. The impact of this flaw is that sensitive information such as passwords...

BIT-ELASTICSEARCH-2023-31418 Elasticsearch uncontrolled resource consumption

An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and...

BIT-ELASTICSEARCH-2023-31419 Elasticsearch StackOverflow vulnerability

A flaw was discovered in Elasticsearch, affecting the search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service...

BIT-ELASTICSEARCH-2023-46673

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API...

BIT-APPSMITH-2022-38299

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, timoni, kargo, kubeflow, cert-exporter, pulumi-language-java, pulumi-language-yaml, atlantis, kubernetes-csi-driver-hostpath, gitness, hugo-extended, newrelic-nri-kube-events, goreleaser, newrelic-infrastructure-agent,...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for January 2023.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 23.0.2-IF001. Vulnerability Details CVEID:CVE-2023-46673 DESCRIPTION: Elastic Elasticsearch is vulnerable to a denial of service, caused by improper handling of exceptional conditions. By sending a specially...

GHSA-JW7R-RXFF-GV24 vulnerabilities

Vulnerabilities for packages: opensearch, keycloak...

CVE-2024-21742 vulnerabilities

Vulnerabilities for packages: opensearch, keycloak...

GHSA-4265-CCF5-PHJ5 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, kayenta-fips, gradle, opensearch, druid, spdx-tools-java, dependency-track, hadoop-fips, tez, kayenta, trino, celeborn, hadoop-client-modules...

CVE-2024-26308 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, kayenta-fips, gradle, opensearch, druid, spdx-tools-java, dependency-track, hadoop-fips, tez, kayenta, trino, celeborn, hadoop-client-modules...

CVE-2024-25710 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, kayenta-fips, gradle, opensearch, druid, spdx-tools-java, dependency-track, hadoop-fips, tez, kayenta, trino, celeborn, hadoop-client-modules...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Elastic Elasticsearch denial of service vulnerability ( CVE-2023-46673)

Summary Potential Elastic Elasticsearch denial of service vulnerability CVE-2023-46673 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-4667...

GHSA-GVPG-VGMX-XG6W vulnerabilities

Vulnerabilities for packages: elasticsearch, druid, thingsboard, sonarqube-10, dependency-track, tez, celeborn, hadoop-client-modules...

CVE-2023-52428 vulnerabilities

Vulnerabilities for packages: elasticsearch, druid, thingsboard, sonarqube-10, dependency-track, tez, celeborn, hadoop-client-modules...

Elasticsearch - StackOverflow DoS Exploit

Exploit Author: TOUHAMI KASBAOUI Vendor Homepage: https://elastic.co/ Version: 8.5.3 / OpenSearch Tested on: Ubuntu 20.04 LTS CVE : CVE-2023-31419 Ref: https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419 import requests import random import string esurl =...

Elasticsearch - StackOverflow DoS

Exploit Author: TOUHAMI KASBAOUI Vendor Homepage: https://elastic.co/ Version: 8.5.3 / OpenSearch Tested on: Ubuntu 20.04 LTS CVE : CVE-2023-31419 Ref: https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419 import requests import random import string esurl =...

APM Server vulnerable to Insertion of Sensitive Information into Log File

An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this cou...