CVE-2022-41918
1 advisory.
Maven/org.opensearch.plugin:opensearch-security CVE-2022-41918: medium 6.3
OpenSearch has issue with fine-grained access control of indices backing data streams
Action: Upgrade org.opensearch.plugin:opensearch-security to 1.3.7 (1.x) or 2.4.0 (2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.7 | - |
| 2.0.0 | 2.4.0 | - |
Fixed versions
| 1.3.7 | 2.4.0 |
Sources
- osv: GHSA-wmx7-x4jp-9jgg
- https://github.com/opensearch-project/security/security/advisories/GHSA-wmx7-x4jp-9jgg
- https://nvd.nist.gov/vuln/detail/CVE-2022-41918
- https://github.com/opensearch-project/security/commit/f7cc569c9d3fa5d5432c76c854eed280d45ce6f4
- https://github.com/opensearch-project/security
CVE-2022-41918 · published · modified · JSON