Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.opensearch.plugin/opensearch-security@2.4.0
Typemaven
Namespaceorg.opensearch.plugin
Nameopensearch-security
Version2.4.0
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.3.7
Latest_non_vulnerable_version2.11.0.0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-2mte-5ys1-ekbc
vulnerability_id VCID-2mte-5ys1-ekbc
summary 
Incorrect Authorization
OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the indices that back data streams potentially leading to incorrect access authorization. OpenSearch 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to update. There are no known workarounds for this issue.
references
0
reference_url https://github.com/opensearch-project/security/commit/f7cc569c9d3fa5d5432c76c854eed280d45ce6f4
reference_id
reference_type
scores
url https://github.com/opensearch-project/security/commit/f7cc569c9d3fa5d5432c76c854eed280d45ce6f4
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-41918
reference_id CVE-2022-41918
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-41918
2
reference_url https://github.com/advisories/GHSA-wmx7-x4jp-9jgg
reference_id GHSA-wmx7-x4jp-9jgg
reference_type
scores
url https://github.com/advisories/GHSA-wmx7-x4jp-9jgg
3
reference_url https://github.com/opensearch-project/security/security/advisories/GHSA-wmx7-x4jp-9jgg
reference_id GHSA-wmx7-x4jp-9jgg
reference_type
scores
url https://github.com/opensearch-project/security/security/advisories/GHSA-wmx7-x4jp-9jgg
fixed_packages
0
url pkg:maven/org.opensearch.plugin/opensearch-security@1.3.7
purl pkg:maven/org.opensearch.plugin/opensearch-security@1.3.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.opensearch.plugin/opensearch-security@1.3.7
1
url pkg:maven/org.opensearch.plugin/opensearch-security@2.4.0
purl pkg:maven/org.opensearch.plugin/opensearch-security@2.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.opensearch.plugin/opensearch-security@2.4.0
aliases CVE-2022-41918, GHSA-wmx7-x4jp-9jgg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2mte-5ys1-ekbc
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.opensearch.plugin/opensearch-security@2.4.0