Improper Input Validation in OpenSearch Dashboards Plugin

Executive Summary

This vulnerability involves improper input validation in the dashboards-observability plugin of OpenSearch Dashboards. A remote authenticated user with write permissions can upload a saved asset containing arbitrary web content, which executes arbitrary JavaScript in the browser sessions of other users.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves improper input validation in the dashboards-observability plugin of OpenSearch Dashboards. To detect it, monitor for unauthorized saved objects with arbitrary JavaScript content uploaded by users with write permissions. Check for unusual browser session behavior or unexpected script execution in user interfaces.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to run malicious scripts in other users' browsers, potentially stealing session cookies, sensitive data, or performing actions on their behalf. This could lead to unauthorized access to data or systems.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Compliance may be compromised if sensitive data is exposed.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict write permissions to OpenSearch Dashboards saved objects for all users except administrators. Review and remove any suspicious saved assets with arbitrary web content uploaded by users.

Useful 0 Not Useful 0