Opensearch-project Security vulnerabilities

• opensearch-project security-dashboards-plugin OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect CVE-2024-43794 6.1 MediumAugust 23, 2024
• amazon opensearch, embysupport security +1 more OpenSearch Issue with tenant read-only permissions CVE-2023-45807 Fix available 5.4 MediumOctober 16, 2023
• amazon opensearch, embysupport security, amazon opensearch security +2 more OpenSearch issue with fine-grained access control during extremely rare race conditions CVE-2023-31141 Fix available 4.8 MediumMay 8, 2023
• amazon opensearch, opensearch security, embysupport security +2 more Time discrepancy in authentication responses in OpenSearch CVE-2023-25806 Fix available 5.3 MediumMarch 2, 2023
• amazon opensearch, embysupport security +1 more Issue with whitespace in JWT roles in OpenSearch CVE-2023-23612 Fix available 4.7 MediumJanuary 24, 2023
• amazon opensearch, embysupport security +1 more Field-level security issue with .keyword fields in OpenSearch CVE-2023-23613 Fix available 5.7 MediumJanuary 24, 2023
• amazon opensearch, embysupport security +1 more Issue with fine-grained access control of indices backing data streams CVE-2022-41918 Fix available 6.3 MediumNovember 15, 2022
• amazon opensearch, embysupport security +1 more OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information CVE-2022-35980 Fix available 7.5 HighAugust 12, 2022