Threats tagged 'ghsa-pw98-7748-hwv3'

Elasticsearch has a vulnerability involving the use of cache containing sensitive information, which can lead to information disclosure and incorrect search results. Specifically, cached query results may be shared between users with different field-level security restrictions, allowing restricted users to infer data they should not access and causing incomplete results for users with full access. This issue arises only when a user with full access has recently run the same query on the same shard.