3 ms·
Bubble.io security research: 0day exploiting Elasticsearch implementation
- mellosouls 2y agoMore context on X: We've got a 0day exploit. The 0day impacts an organization which provides managed services for Danone, SeaGate, Unity, Shopify, Paramount Pictures, HubSpot, Amazon, PWC, Yamaha, L'Oreal The exploit was reported, but the vendor ignored it. https://x.com/vxunderground/status/1913028940634972211 https://x.com/vxunderground/status/1913028940634972211
- tough 2y agothis is why you use row level security and proper authorization on postgres and not elastic search eith some email id as filter in 2025