8.7
Élevée
CVE-2026-77811 Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote…
Description
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Amazon OpenSearch Service | Versions non publiées | |
| OpenSearch Dashboards dashboards-observability plugin 3.4 | premières → < 3.4 | 3.4 |
| OpenSearch Dashboards dashboards-observability plugin 2.19 | premières → < 2.19.6 | 2.19.6 |
Références
- opensearch.org opensearch.org
- opensearch.org opensearch.org
- aws.amazon.com aws.amazon.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Amazon OpenSearch Service
Les 4 CVE de Amazon OpenSearch Service →
CVE-2026-84942
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote…
8.7
Élevée
CVE-2026-18420
Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an…
8.8
Élevée
CVE-2026-75897
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload…
7.5
Élevée