CVE-2023-31417

score

<0.1

cvss

4.1

epss

0.2%

published

2023-10-26

kev added

—

first seen

2026-10-21

Elasticsearch contains a sensitive information disclosure caused by missing filtering when requests use certain deprecated URIs for APIs, letting sensitive data like passwords and tokens be logged in cleartext, exploit requires use of deprecated URIs.