https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:59:51 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2021-22137 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2021-22137 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0304 certfr-2025-avi-0304 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0304 https://cve.radiocsirt.org/vuln/euvd-2026-22643 EUVD-2026-22643 https://cve.radiocsirt.org/vuln/euvd-2026-22643 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22137 <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22137 https://cve.radiocsirt.org/vuln/ghsa-hr65-qq6p-87r4 <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> https://cve.radiocsirt.org/vuln/ghsa-hr65-qq6p-87r4 https://cve.radiocsirt.org/vuln/gsd-2021-22137 gsd-2021-22137 https://cve.radiocsirt.org/vuln/gsd-2021-22137 https://cve.radiocsirt.org/vuln/rhsa-2022:5606 <p>hadoop: WebHDFS client might send SPNEGO authorization header lz4: memory corruption due to an integer overflow bug caused by memmove argument elasticsearch: executing async search improperly stores HTTP headers leading to information disclosure elasticsearch: Document disclosure flaw in the Elasticsearch suggester elasticsearch: Document disclosure flaw when Document or Field Level Security is used jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xstream: Injecting highly recursive collections or maps can cause a DoS quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus</p> <p>hadoop: WebHDFS client might send SPNEGO authorization header lz4: memory corruption due to an integer overflow bug caused by memmove argument elasticsearch: executing async search improperly stores HTTP headers leading to information disclosure elasticsearch: Document disclosure flaw in the Elasticsearch suggester elasticsearch: Document disclosure flaw when Document or Field Level Security is used jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xstream: Injecting highly recursive collections or maps can cause a DoS quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5606 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22137 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22137