CVE-2024-12539

Publication date

2024-12-17 20:50:04

Family

elastic

State

PUBLISHED

Description

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.