cvedb.io
CVE-2021-31828
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2021-05-06T19:15:07.630 · Last modified 2026-06-17T03:52:18.380

Summary

An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope.

Affected products

amazon — open_distro

Does this affect you?

Add your gear to cvedb and we'll alert you only when amazon ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.