org.elasticsearch.plugin:x-pack-core@8.13.1 vulnerabilities
-
latest version
8.15.0
-
latest non vulnerable version
-
first published
4 years ago
-
latest version published
a month ago
-
licenses detected
- [6.8.11,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.elasticsearch.plugin:x-pack-core package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Exposure of Sensitive Information to an Unauthorized Actor via the Remote Cluster Search Cross Cluster API Key. If a cross-cluster API key restricts search for a given index using the query or the Note: This issue only affects the API key based security model for remote clusters 4 that was previously a beta feature and is released as GA with 8.14.0. How to fix Exposure of Sensitive Information to an Unauthorized Actor? Upgrade |
[8.10.0,8.14.0)
|