CyberRota Analysis
AI-GeneratedThe OpenSearch Security Analytics plugin is vulnerable due to inadequate input validation in its threat intelligence feed parser, enabling authenticated remote users to exploit server-side request forgery (SSRF) vulnerabilities. This could allow attackers to read local files by manipulating URL parameters in the threat intel source configuration endpoint. Organizations using this plugin should prioritize remediation to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.