Directory Security Advisories Pricing

/

Security Advisories

CVE-2025-37727

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-37727

Severity

5.7

Medium

CVSS V3

Description

Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.