Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.opensearch.plugin:opensearch-security

7 known vulnerabilities (1 high, 6 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 high, 6 medium
Registry
Maven Central

Advisories 7

  • CVE-2023-45807Medium 5.4

    OpenSearch Issue with tenant read-only permissions

    Affected: from 2.0.0.0, fixed in 2.11.0.0; fixed in 1.3.14.0.

  • CVE-2023-31141Medium 4.8

    OpenSearch issue with fine-grained access control during extremely rare race conditions

    Affected: from 1.0.0, fixed in 1.3.10.0; from 2.0.0, fixed in 2.7.0.0.

  • CVE-2023-25806Medium 5.3

    Time discrepancy in authentication responses in OpenSearch

    Affected: fixed in 1.3.9; from 2.0.0, fixed in 2.6.0.

  • CVE-2023-23612Medium 4.7

    Issue with whitespace in JWT roles in OpenSearch

    Affected: fixed in 1.3.8; from 2.0.0, fixed in 2.5.0.

  • CVE-2023-23613Medium 5.7

    Field-level security issue with .keyword fields in OpenSearch

    Affected: fixed in 1.3.8; from 2.0.0, fixed in 2.5.0.

  • CVE-2022-41918Medium 6.3

    Issue with fine-grained access control of indices backing data streams

    Affected: fixed in 1.3.7; from 2.0.0, fixed in 2.4.0.

  • OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information

    Affected: from 2.0.0.0, fixed in 2.2.0.0.