VULNERABILITY INTELLIGENCE

CVE-2024-12539

CVSS score6.5 MEDIUM

EPSS probability0.46%

CISA KEVNot currently listed

Published2024-12-17

Last modified2026-06-17

Description

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.