UNKNOWN Maven
Cross-site scripting in Elasticsearch
GHSA-8699-m855-cwqf · CVE-2014-6439
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2014-6439
- WEB https://www.elastic.co/community/security
- WEB http://packetstormsecurity.com/files/128556/Elasticsearch-1.3.x-CORS-Issue.html
- WEB http://www.elasticsearch.org/blog/elasticsearch-1-4-0-beta-released
- WEB http://www.securityfocus.com/archive/1/533602/100/0/threaded
- WEB http://www.securityfocus.com/bid/70233
Ready to move
Start Securing
Free, no credit card | First findings in minutes