Potential security issue about elasticsearch-readonlyrest-plugin HOT 7 CLOSED

@coutoPL @sscarduzio - thanks for the update and contributions!

from elasticsearch-readonlyrest-plugin.

Hi @JamieSlome. You are right, we need the security file. I Will take care of adding it later today. In the meantime please contact support at readonlyrest.com.

Thank you!

from elasticsearch-readonlyrest-plugin.

I added the SECURITY.md as requested
https://github.com/sscarduzio/elasticsearch-readonlyrest-plugin/blob/develop/SECURITY.md

from elasticsearch-readonlyrest-plugin.

@sscarduzio - thank you for your timely response here. Just for reference, you can view the report directly here:

https://huntr.dev/bounties/6b10fb54-c2f2-45d0-8459-63a941992114/

It is private and only visible to you (the owner of the repository). Let me know if you have any questions!

from elasticsearch-readonlyrest-plugin.

@sscarduzio - you should have just received an e-mail to the address in your SECURITY.md with further details of the report.

from elasticsearch-readonlyrest-plugin.

Hi @JamieSlome, thanks for this report. We fixed the issue already yesterday night. It affected an experimental part of our code (ROR proxy) that was never packaged and released to customers. So the impact is fortunately null.

from elasticsearch-readonlyrest-plugin.

this is fixed: #773

from elasticsearch-readonlyrest-plugin.