Approved changes feed: RSS · Atom

cpe:2.3:a:opensearch-project:security-dashboards-plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpensearch Project (4f1a5c8a-fdeb-57b7-acec-88c38c51999d)
ProductSecurity Dashboards Plugin (9ebd90f0-c29b-550c-8d92-7dbcf6cf454f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43794 vulnerable 2026-06-08 06:45:53.041791 OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect
MEDIUM (6.1)
OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue.
Published: 2024-08-23T16:15:58.428Z
Updated: 2024-08-23T17:01:06.990Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.