{"action":"Upgrade org.elasticsearch:elasticsearch to 5.6.15 (5.x) or 6.6.1 (6.x) or later.","affected":[{"fixed":"5.6.15","introduced":"0"},{"fixed":"6.6.1","introduced":"6.0.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2019-7611"],"ecosystem":"Maven","epss":0.02149,"exploited":false,"fixed_versions":["5.6.15","6.6.1"],"ghsa_id":"GHSA-fj32-6v7m-57pg","id":"tcs_01M5N8W42FERS5E5KRBQQEK3TN","modified_at":"2023-11-08T04:01:38.856498Z","published_at":"2022-05-13T01:14:26Z","references":["https://osv.dev/vulnerability/GHSA-fj32-6v7m-57pg","https://nvd.nist.gov/vuln/detail/CVE-2019-7611","https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077","https://github.com/elastic/elasticsearch","https://www.elastic.co/community/security"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-fj32-6v7m-57pg","url":"https://osv.dev/vulnerability/GHSA-fj32-6v7m-57pg"}],"summary":"Improper Access Control in Elasticsearch"}