CVE-2022-41917 - CVE House

Back to Database

Status published Medium CVE-2022-41917

Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch

4.3 CVSS

Vulnerability Description

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. OpenSearch allows users to specify a local file when defining text analyzers to process data for text analysis. An issue in the implementation of this feature allows certain specially crafted queries to return a response containing the first line of text from arbitrary files. The list of potentially impacted files is limited to text files with read permissions allowed in the Java Security Manager policy configuration. OpenSearch version 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to upgrade. There are no known workarounds for this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-41917

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from opensearch-project

View All →

OpenSearch Data Prepper plugins trusts all SSL certificates by default

OpenTelemetry Logs source may lack authentication with some custom plugins

OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect

OpenSearch Observability does not properly restrict access to private tenant resources

OpenSearch Dashboards Reports does not properly restrict access to private tenant resources

Affected Vendor

opensearch-project

View all reports →

Affected Software

OpenSearch

Vulnerable Versions:

< 1.3.7, >= 2.0.0, < 2.4.0

Timeline

Official Publish: November 15th, 2022

Last Modified: April 23rd, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1041 Exfiltration Over C2 Channel