CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

EUVD-2021-18703

Malware in sbrugna...

Server side request forgery (ssrf)

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2021-31828

CVE-2021-31828 (ODFE SSRF) affects Open Distro for Elasticsearch (ODFE) until version 1.13.1.0. The issue is an SSRF in the Alerting module that allows an authenticated, existing privileged user to enumerate listening services or interact with configured resources by issuing HTTP requests beyond ...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

Server-Side Request Forgery (SSRF)

An SSRF issue in Open Distro for Elasticsearch ODFE allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

PT-2021-19531

Name of the Vulnerable Software and Affected Versions Open Distro for Elasticsearch versions prior to 1.13.1.0 Description The issue allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests, exceeding the intended scope of the...

CVE-2021-31828: Server-Side Request Forgery (SSRF)

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...