High severity · published Jun 30, 2022
CVE-2022-31115
opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby
8.8
CVSS
1.6%
EPSS
No
On KEV
Description
opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby `YAML.load` function was used instead of `YAML.safe_load`. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using YAML.load if the response is of type YAML. An attacker must be in control of an opensearch server and convince the victim to connect to it in order to exploit this vulnerability. The problem has been patched in opensearch-ruby gem version 2.0.1. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensearch · Amazon
before 2.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-31115
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-31115
Patch
https://github.com/opensearch-project/opensearch-ruby/pull/77
Third Party Advisory
https://github.com/opensearch-project/opensearch-ruby/security/advisories/GHSA-977c-63xq-cgw3
Exploit
https://staaldraad.github.io/post/2021-01-09-universal-rce-ruby-yaml-load-updated/
More from Opensearch
8.8
CVE-2023-23612
OpenSearch is an open source distributed and RESTful search engine
7.5
CVE-2025-9624
OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS
7.5
CVE-2022-35980
OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization
6.5
CVE-2023-23613
OpenSearch is an open source distributed and RESTful search engine
6.3
CVE-2022-41918
OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana