writeups.xyz / ElasticSearch Smash & Grab

Submitter : c2a

Date: 26 July 2024

Bounty : undisclosed

Vulnerabilities :

• Elasticsearch
• Information Disclosure
• Missing Authentication

Programs :

• Undisclosed

Authors :

• Jesse Clark (@Hogarth45_)

Link :
https://hogarth45.medium.com/elasticsearch-smash-grab-99cf36cdefbb