Maven/org.opensearch.plugin:opensearch-security: low 3.7
OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
Action: Upgrade org.opensearch.plugin:opensearch-security to 2.19.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.11.0.0 | 2.19.0.0 | - |
Fixed versions
| 2.19.0.0 |
Sources
- osv: GHSA-83x9-vc3c-hghc
- https://github.com/opensearch-project/security/security/advisories/GHSA-83x9-vc3c-hghc
- https://github.com/opensearch-project/security
published · modified · JSON