Junglewise Threat Intelligence

OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape

Severity: low · CVSS 3.1 · Published 2025-08-01

Technologies: org.opensearch.plugin:opensearch-security (Maven). Vendors: Maven.

Executive brief

OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape

Affected products

  • Maven org.opensearch.plugin:opensearch-security

Related threats