CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessive logging. This issue only affects users that use Watcher and have a Watch defined that uses the search input and additionally have set the search input’s logger to DEBUG or finer, for example using: org.elasticsearch.xpack.watcher.input.search, org.elasticsearch.xpack.watcher.input, org.elasticsearch.xpack.watcher, or wider, since the loggers are hierarchical.

• CWE-532
• CWE-532

• https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179Vendor Advisory
• https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179Vendor Advisory

Published

Jul 26, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49910A stack-based buffer overflow vulnerability exists in the we…8.8
• CVE-2023-49911A stack-based buffer overflow vulnerability exists in the we…8.8
• CVE-2023-49912A stack-based buffer overflow vulnerability exists in the we…8.8
• CVE-2023-49913A stack-based buffer overflow vulnerability exists in the we…8.8
• CVE-2023-49914InteraXon Muse 2 devices allow remote attackers to cause a d…6.5
• CVE-2023-49920Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerabi…6.5
• CVE-2023-49922An issue was discovered by Elastic whereby Beats and Elastic…6.5
• CVE-2023-49923 An issue was discovered by Elastic whereby the Documents AP…6.5
• CVE-2023-49926app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 a…6.1
• CVE-2023-49927An issue was discovered in Samsung Mobile Processor, Wearabl…5.3
• CVE-2023-49928An issue was discovered in Samsung Mobile Processor, Wearabl…7.5
• CVE-2023-4993Incorrect Use of Privileged APIs vulnerability in Utarit Inf…7.5