maven

org.elasticsearch:elasticsearch

44 Total advisories

44 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.elasticsearch:elasticsearch is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.elasticsearch:elasticsearch

Vulnerabilities

Elasticsearch Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function

Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates

Elasticsearch Incorrect Authorization vulnerability

Elasticsearch: Insertion of Sensitive Information into Log File via reindex API

Elasticsearch Incorrect Authorization vulnerability

Elasticsearch StackOverflow vulnerability

Elasticsearch Uncontrolled Resource Consumption vulnerability

Elasticsearch stores private key on disk unencrypted

Elasticsearch vulnerable to Uncontrolled Resource Consumption

Elasticsearch Improper Access Control vulnerability

Elasticsearch Uncontrolled Resource Consumption Vulnerability

Elasticsearch Uncaught Exception leading to crash

Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion

Elasticsearch allocation of resources without limits or throttling leads to crash

Elasticsearch allows insertion of sensitive information into log files when using deprecated URIs

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

Improper Access Control in Elasticsearch

Cross-site scripting in Elasticsearch

Elasticsearch Insertion of Sensitive Information into Log File

Elasticsearch vulnerable to stack overflow in the search API

Exposure of Sensitive Information to an Unauthorized Actor

Privilege Context Switching Error in Elasticsearch

Improper Check for Unusual or Exceptional Conditions in Elasticsearch

Improper Privilege Management in Elasticsearch

Insertion of Sensitive Information into Log File in Elasticsearch

Withdrawn: Cross-site Scripting in Kibana

Denial of Service in Elasticsearch

Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Improper Access Control in Elasticsearch

Elasticsearch privilege escalation

Improper privilege management in elasticsearch

API information disclosure flaw in Elasticsearch

Privilege Escalation Flaw in Elasticsearch

Insufficiently Protected Credentials in Elasticsearch

Exposure of sensitive information in Elasticsearch

Elasticsearch subject to cross site scripting

Elasticsearch Improper Handling of Exceptional Conditions

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Improper Access Control in Elasticsearch

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Improper Restriction of XML External Entity Reference in Elasticsearch

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Browse more Maven advisories

Start Securing