| Package | Affected versions | Patched versions |
|---|---|---|
| org.elasticsearch:elasticsearch | ≥ 8.16.0, < 8.16.2 | 8.16.2 |
| elasticsearch | ≥ 8.16.0, < 8.16.2 | 8.16.2 |
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free