github.com/blevesearch/bleve

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.2

CVE-2022-31022

Missing Role Based Access Control for the REST handlers in bleve/http package

Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pave way for exploitation of a node’s filesystem where the bleve index resides, if the user has used b…

blevesearch bleve github.com/blevesearch/bleve/v2 golang-github-blevesearch-bleve Debian Ubuntu Go

Jun 1, 2022