Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/07 12:08 a.m.11 views

GHSA-22VX-2X23-98W6 OpenSearch vulnerable to improper authorization for Rollover Requests

Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a rollover request included an explicit target index name, the security plugin did not properly evaluate access control permissions against the target index. This could allow a user wit...

2.2CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder