← CVE Intelligence

CVE-2021-37940

Elastic / Enterprisesearch PUBLISHED

Description (CNA)

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.

Affected (CNA)

Vendor / productVersions
Elastic / Enterprisesearchaffected before 7.16.0

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.