Sensitive data sent to ElasticSearch detected.

Rule ID: javascript_third_parties_elasticsearch
Languages: javascript
Source: elasticsearch.yml

Description

Leaking sensitive data to database is a common cause of data leaks and can lead to data breaches. This rule looks for instances of sensitive data sent to elasticsearch.

Remediations

Associated CWE

CWE-201: Insertion of Sensitive Information Into Sent Data

OWASP Top 10

A01:2021 - Broken Access Control

Ready to take the next step? Join the Bearer Cloud waitlist.