CyberRota Analysis
AI-GeneratedThe dashboards-observability plugin in OpenSearch Dashboards is vulnerable due to improper input validation, allowing remote authenticated users with write permissions to execute arbitrary JavaScript in other users' browser sessions. This could lead to unauthorized actions or data exposure, significantly impacting user security and privacy. Organizations utilizing OpenSearch Dashboards should prioritize addressing this vulnerability to protect their systems from potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.