Lucene search
PRIOn knowledge basePRION:CVE-2021-22140HistoryMay 13, 2021 - 6:15 p.m.
Xxe
2021-05-1318:15:00
PRIOn knowledge base
www.prio-n.com
3
Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue (XXE) in the App Search web crawler beta feature. Using this vector, an attacker whose website is being crawled by App Search could craft a malicious sitemap.xml to traverse the filesystem of the host running the instance and obtain sensitive files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elastic_app_search | ge | 7.11.0 | |
| elastic_app_search | lt | 7.12.0 |
Related
nvd
nvd
CVE-2021-22140
2021-05-13 18:15:09
cve
cve
CVE-2021-22140
2021-05-13 18:15:09
nessus
nessus
Kibana 7.11.0 < 7.12.1 Denial Of Service
2023-01-11 00:00:00
cvelist
cvelist
CVE-2021-22140
2021-05-13 17:35:20
redhatcve
redhatcve
CVE-2021-22140
2021-04-29 23:50:57
osv
osv
CVE-2021-22140
2021-05-13 18:15:09