UNKNOWN Maven
Elasticsearch Incorrect Authorization vulnerability
GHSA-5mpw-4546-2wcr · BIT-elasticsearch-2024-12539 · CVE-2024-12539
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
Ready to move
Start Securing
Free, no credit card | First findings in minutes