CVE-2021-31828 | BDVDB-2026-153269 Detail

Description#

An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/opendistro-for-elasticsearch/alerting/pull/353
https://opendistro.github.io/for-elasticsearch-docs/version-history/
https://rotem-bar.com/ssrf-in-open-distro-for-elasticsearch-cve-2021-31828

Exploit#

No public exploit known

History#

Version 12021-05-06Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.