Executive brief
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape
Affected products
- Maven org.opensearch.plugin:opensearch-security
Junglewise Threat Intelligence
Severity: low · CVSS 3.1 · Published 2025-08-01
Technologies: org.opensearch.plugin:opensearch-security (Maven). Vendors: Maven.
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape