CVE-2021-22149

概要

参考情報

• discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344 · Vendor Advisory
• elastic.co/community/security · Vendor Advisory

enterprise search のその他の脆弱性

• CVE-2023-49923中 6.5 An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level. …
• CVE-2021-37940中 6.8An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterpri…
• CVE-2021-22148高 8.8Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as …
• CVE-2020-7018高 8.8Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developerï¿…