Total vulnerabilities in the database
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
| Software | From | Fixed in |
|---|---|---|
| elastic / elasticsearch | 8.16.0 | 8.16.2 |