CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with…

published May 6, 2021

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00893 · 59.1th percentile
Published
2021-05-06T18:13Z
EPSS history
Timeline
  • 06 MAY 18:13Z
    An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with…
    cvelistv5