| Package | Affected versions | Patched versions |
|---|---|---|
| org.elasticsearch.plugin:reindex-client | ≥ 7.0.0, < 8.18.8≥ 8.19.0, < 8.19.5≥ 9.0.0-beta1, < 9.0.8≥ 9.1.0, < 9.1.5 | 8.18.88.19.59.0.89.1.5 |
| elasticsearch | ≥ 7.0.0, ≤ 7.17.29≥ 8.0.0, < 8.18.8≥ 8.19.0, < 8.19.5≥ 9.0.0, < 9.0.8≥ 9.1.0, < 9.1.5 | 8.18.88.19.59.0.89.1.5 |
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free