Aller au contenu
en Se connecter
8.6 Élevée

CVE-2026-18952 Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might…

Description

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.

Produits et versions touchés

Produit Versions touchées Corrigé en
OpenSearch 2.15 2.15.0 → < 3.5.0 3.5.0
OpenSearch 2.15 2.15.0 → < 3.7.0 3.7.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de OpenSearch

Les 3 CVE de OpenSearch →
CVE-2026-18428 A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote… 8.7 Élevée CVE-2026-19311 Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated… 8.6 Élevée
Suivre cette CVE