The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Elastic Elasticsearch | — | Upgrade Elastic Elasticsearch to the latest version | May 13, 2025 | Jan 14, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 14, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub