Vulnerability GHSA-56r7-h6mw-rcfv
Medium Risk
MEDIUM RISK
CVSS Score: 5.7
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
11 months ago
October 10, 2025 at 12:30 PM UTC
Elasticsearch: Insertion of Sensitive Information into Log File via reindex API
7.0.0 - 7.2.1 and 7.7.0 - 7.8.1 and 7.12.0 - 7.12.1
7.0.0 - 7.2.1 and 7.7.0 - 7.8.1 and 7.12.0 - 7.12.1
Summary
Elasticsearch: Insertion of Sensitive Information into Log File via reindex API
Details
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex
Impacted packages
Timeline
Published
11 months ago
October 10, 2025 at 12:30 PM UTC
Last Modified
3 hours ago
September 29, 2026 at 09:45 PM UTC