Amazon OpenSearch Service vulnerabilities
4 known vulnerabilities in Amazon OpenSearch Service from AWS. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
Amazon OpenSearch Service: Improper Neutralization of Input During Web Page Generation
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a c
- 8.7 High severity
Amazon OpenSearch Service: Improper Neutralization of Input During Web Page Generation
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser se
- 8.8 High severity
Amazon OpenSearch Service: Improperly Controlled Modification of Object Prototype Attributes
Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a
- 7.5 High severity
OpenSearch Dashboards: Improper Validation of Specified Quantity in Input
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.