PT-2024-28718 · Unknown +1 · Opensearch +1

Name of the Vulnerable Software and Affected Versions: OpenSearch versions prior to 2.14 Description: An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when accessi...

ROS-20240704-05

Vulnerability in the OpenSearch software package related to incorrectly restricting reference to an external XML entity. Exploitation of the vulnerability could allow an attacker to conduct XXE attacks...

GHSA-328P-362G-R48J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-328P-362G-R48J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

GHSA-876P-C77M-X2HC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-876P-C77M-X2HC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

CVE-2024-38996 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-39001 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

CVE-2024-38996 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...

CVE-2024-39001 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-W877-JFW7-46RJ vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-W877-JFW7-46RJ vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-37902 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-37902 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-37890 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows, kubeflow-centraldashboard, kubeflow-pipelines, kibana...

GHSA-3H5V-Q93C-6H6Q vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows, kubeflow-centraldashboard, kubeflow-pipelines, kibana...

GHSA-GRV7-FG5C-XMJG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows, kubeflow-pipelines, lerna, kibana...

GHSA-952P-6RRQ-RCJV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows, renovate, kubeflow-pipelines, lerna, kibana, ts-patch...

CVE-2024-4068 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows, kubeflow-pipelines, lerna, kibana...

CVE-2024-4067 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, argo-workflows, renovate, kubeflow-pipelines, lerna, kibana, ts-patch...