Lucene search
+L

4 matches found

UbuntuCve
UbuntuCve
•added 2023/01/26 9:18 p.m.•20 views

CVE-2023-23613

OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security FLS and field masking where rules written to explicitly exclude fields are not correctly applied for certain queries that rely on their...

6.5CVSS6.7AI score0.00821EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/24 8:33 p.m.•53 views

CVE-2023-23613 Field-level security issue with .keyword fields in OpenSearch

OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security FLS and field masking where rules written to explicitly exclude fields are not correctly applied for certain queries that rely on their...

5.7CVSS6.4AI score0.00821EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/24 8:33 p.m.•8 views

CVE-2023-23613 Field-level security issue with .keyword fields in OpenSearch

OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security FLS and field masking where rules written to explicitly exclude fields are not correctly applied for certain queries that rely on their...

5.7CVSS5.9AI score0.00821EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/24 8:33 p.m.•140 views

CVE-2023-23613

CVE-2023-23613 affects OpenSearch with a flaw in field-level security (FLS) and field masking. Rules that explicitly exclude fields may not be applied correctly for queries relying on generated .keyword fields, potentially exposing data to authenticated users with read access to restricted indexe...

6.5CVSS5.6AI score0.00821EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder