opensearch-project security
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-45807 | < 1.3.14.0 ; >= 2.0.0.0, < 2.11.0.0 | OpenSearch Issue with tenant read-only permissions | MEDIUM 5.4 | 0.5 % | ||
| CVE-2023-31141 | >= 1.0.0, < 1.3.10 ; >= 2.0.0, < 2.7.0 | OpenSearch issue with fine-grained access control during extremely rare race conditions | MEDIUM 5.9 | 0.5 % | ||
| CVE-2023-25806 | < 1.3.9 ; >= 2.0.0, < 2.6.0 | Time discrepancy in authentication responses in OpenSearch | MEDIUM 5.3 | 0.3 % | ||
| CVE-2023-23612 | >= 2.0.0, < 2.5.0 ; < 1.3.8 | Issue with whitespace in JWT roles in OpenSearch | HIGH 8.8 | 0.8 % | ||
| CVE-2023-23613 | >= 2.0.0, < 2.5.0 ; < 1.3.8 | Field-level security issue with .keyword fields in OpenSearch | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-41918 | <1.3.7 ; >= 2.0.0, < 2.4.0 | Issue with fine-grained access control of indices backing data streams | MEDIUM 6.3 | 0.5 % | ||
| CVE-2022-35980 | >= 2.0.0.0, <= 2.1.0.0 | OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information | HIGH 7.5 | 1.2 % |