← Database

CVE-2025-37727

MEDIUM CVSS: 5.7 Published: 2025-10-10 Modified: 2026-06-17

Description

Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex

Affected Platforms

Elastic Elasticsearch

Weakness Type

CWE-532

References