de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2024-23444 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2024-23444 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2023-31418 Source...

SUSE CVE-2013-4758

Double free vulnerability in the writeDataError function in the ElasticSearch plugin omelasticsearch in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted...

SUSE CVE-2018-3827

A sensitive data disclosure flaw was found in the Elasticsearch repository-azure formerly elasticsearch-cloud-azure plugin. When the repository-azure plugin is set to log at TRACE level Azure credentials can be inadvertently logged...

CVE-2022-42123

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin...

CVE-2022-38299

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

Design/Logic Flaw

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

CVE-2022-38299

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

CVE-2022-38299

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

CVE-2022-38299

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

Appsmith security vulnerabilities

Appsmith is an open source platform for building, deploying and maintaining on-premise applications from Appsmith Open Source. A security vulnerability exists in Appsmith version v1.7.11, which stems from an issue in the Elasticsearch plugin that allows an attacker to connect unallowed hosts to...

PT-2022-24349 · Appsmith +1 · Appsmith +1

Name of the Vulnerable Software and Affected Versions: Appsmith version 1.7.11 Description: An issue in the Elasticsearch plugin allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint. Recommendations: For Appsmith version 1.7.11, consider disabling the Elasticsear...

CVE-2022-38299: Undefined Security Weakness

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2021-22137 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2021-22137 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2020-7019 Source advisor...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2019-7614 Source advisor...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2019-7614 Source advisor...

com.sonian:elasticsearch-equilibrium (0.20.0), com.sonian:elasticsearch-jetty (>=0.20.0, <=0.20.1) +2 more potentially affected by CVE-2019-7614 via org.elasticsearch:elasticsearch (0.20.2)

org.elasticsearch:elasticsearch MAVEN version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sonian:elasticsearch-equilibrium 0.20.0 - com.sonian:elasticsearch-jetty =0.20.0, =0.20.2-0....