VYPR

Elasticsearch data source resource proxy

by Grafana

CVEs (1)

  • CVE-2026-106475HigNov 12, 2026
    risk 0.46cvss 7.1epss —

    The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other…