CVE-2024-39900
1 advisory.
Maven/org.opensearch.plugin:opensearch-reports-scheduler CVE-2024-39900: medium 5.4, EPSS 0.30%
The OpenSearch reporting plugin improperly controls tenancy access to reporting resources
Action: Upgrade org.opensearch.plugin:opensearch-reports-scheduler to 2.14.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14.0.0 | - |
Fixed versions
| 2.14.0.0 |
Sources
- osv: GHSA-xmvg-335g-x44q
- https://github.com/opensearch-project/reporting/security/advisories/GHSA-xmvg-335g-x44q
- https://nvd.nist.gov/vuln/detail/CVE-2024-39900
- https://github.com/opensearch-project/reporting/commit/2403014c57ee63268e83d919db3334b676a8c992
- https://github.com/opensearch-project/reporting
- https://opensearch.org/versions/opensearch-2-14-0.html
CVE-2024-39900 · published · modified · JSON