Skip to content
OpenAdvisories

Package · Maven

org.opensearch.plugin:opensearch-security

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    GHSA-8wx3-324g-w4qq

    OpenSearch uncontrolled resource consumption

    ### Impact An issue has been identified with how OpenSearch handled incoming requests on the HTTP layer. An unauthenticated user could force an OpenSearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issu…

    org.opensearch.plugin:opensearch-security Maven
  • High 7.5
    CVE-2022-35980

    OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information

    OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin are affected by an information disclosure vulnerability. Requests to an OpenSearch cluster configured …

    OpenSearch security org.opensearch.plugin:opensearch-security Maven