Vulnerability - ESA-2024-22 - Kibana

Hello!

Please, there is a security issue on Kibana (Kibana 8.14.2 / 7.17.23 Security Update (ESA-2024-22) - Security Announcements - Discuss the Elastic Stack) and, since Opensearch-Dashboards is derived on Kibana 7.10.2, i want to know if this vulnerability applies to Opensearch version 2.11.1.

Thanks in advance!

Gabriel.

@gferrette According to the provided link the ESA-2024-22 vulnerability affects Kibana ML module and ML indices.
The Kibana ML module is a paid part of the X-Pack. As far as I’m aware OpenSearch Dashboard’s ML plugin is not related to Kibana’s and it was introduced in version 1.3.0

1 Like