CVE-2025-13653: CVE-2025-13653: hassas bilgi ifşası

Açıklama (NVD)

In Search Guard FLX versions from 3.1.0 up to 4.0.0 with enterprise modules being disabled, there exists an issue which allows authenticated users to use specially crafted requests to read documents from data streams without having the respective privileges.

Özet bilgiler

CVSS v3.1

4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,21 (yüzdelik 12)

CWE

CWE-200

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• docs.search-guard.com
• search-guard.com
• CWE-200