-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.elasticsearch.client:elasticsearch-rest-client | maven | >= 7.10.0, <= 7.13.3 | 7.13.4 |
Miggo AIRoot Cause AnalysisThe vulnerability involves error messages exposing residual data from reused buffers. The RestClient's error handling mechanism (parseResponseException) is responsible for reading HTTP response content and generating exceptions. In affected versions, this function likely included uncleared buffer data in error messages when parsing malformed queries. The patch in 7.13.4 would address this by ensuring proper buffer sanitization or truncation during error message construction.
JavaJavaOngoing coverage of React2Shell