sonatype-2023-4804 Security Details

CVE ID

sonatype-2023-4804

CWE

N/A

CVE Description

opensearch - OpenSearch StackOverflow vulnerability

Published

Dec 4, 2023

CVSS Score & Severity

6.5Medium

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/opensearch/common/regex/Regex.simpleMatchWithNormalizedStrings(Ljava/lang/String;Ljava/lang/String;)Z

JVMVulnerable params: 1

Affected Ecosystems

affected

Source

Sonatype

References

GitHub · Advisory · GHSA-6g3j-p5g6-992fTHIRD_PARTY