opensearch-project/security-dashboards-plugin

opensearch-project/security-dashboards-plugin

GitHubGitHub
GitHubgithub.com
opensearch.orgopensearch.org
Releases124
Frequency2 weeks 6 days
Last Release
Stars88
🔐 Manage your internal users, roles, access control, and audit logs from OpenSearch Dashboards
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-43794↗
6.1 MEDIUM—

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue.