GHSA-83X9-VC3C-HGHC低危已审查

OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths

OSV 1.4.0 · github-reviewed · 修改于 2026-05-07 08:07

发布时间

2026-05-07 08:07

GitHub 审查时间

2026-05-07 08:07

NVD 发布时间

—

源文件

advisories/github-reviewed/2026/05/GHSA-83x9-vc3c-hghc/GHSA-83x9-vc3c-hghc.json

公告说明

Description

A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed when processing certain malformed HTTP requests. This could permit unauthorized access to restricted API endpoints in environments that rely on REST-layer authorization.

Transport-level authorization is not affected by this issue.

Impact

The default OpenSearch distribution is not affected by this issue. REST actions in the default distribution have corresponding transport actions that independently enforce authorization. Custom plugins that register REST actions without a corresponding transport action may be affected, potentially allowing unauthorized read access to those endpoints.

Patches

This issue is fixed in OpenSearch 2.19.0. Users should upgrade to 2.19.0 or later.

受影响的软件包

Maven

org.opensearch.plugin:opensearch-security

ECOSYSTEM

标识信息

别名 / CVE

无

CWE

CWE-863

软件生态

Maven

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

原始 OSV JSON

{
  "id": "GHSA-83x9-vc3c-hghc",
  "aliases": [],
  "details": "### Description\n\nA flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed when processing certain malformed HTTP requests. This could permit unauthorized access to restricted API endpoints in environments that rely on REST-layer authorization.\n\nTransport-level authorization is not affected by this issue.\n\n### Impact\n\nThe default OpenSearch distribution is not affected by this issue. REST actions in the default distribution have corresponding transport actions that independently enforce authorization. Custom plugins that register REST actions without a corresponding transport action may be affected, potentially allowing unauthorized read access to those endpoints.\n\n### Patches\n\nThis issue is fixed in OpenSearch 2.19.0. Users should upgrade to 2.19.0 or later.",
  "summary": "OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "2.11.0.0"
            },
            {
              "fixed": "2.19.0.0"
            }
          ]
        }
      ],
      "package": {
        "name": "org.opensearch.plugin:opensearch-security",
        "ecosystem": "Maven"
      }
    }
  ],
  "modified": "2026-05-07T00:07:42Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
    }
  ],
  "published": "2026-05-07T00:07:42Z",
  "references": [
    {
      "url": "https://github.com/opensearch-project/security/security/advisories/GHSA-83x9-vc3c-hghc",
      "type": "WEB"
    },
    {
      "url": "https://github.com/opensearch-project/security",
      "type": "PACKAGE"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-863"
    ],
    "severity": "LOW",
    "github_reviewed": true,
    "nvd_published_at": null,
    "github_reviewed_at": "2026-05-07T00:07:42Z"
  }
}