medium4.3
CVE-2025-13653
In Search Guard FLX versions from 3.1.0 up to 4.0.0 with enterprise modules being disabled, there exists an issue which allows authenticated users to use speci…
Impact
In Search Guard FLX versions from 3.1.0 up to 4.0.0 with enterprise modules being disabled, there exists an issue which allows authenticated users to use specially crafted requests to read documents from data streams without having the respective privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Search Guard | Search Guard FLX Versions From 3.1.0 | before 4.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.