CVE-2025-62371
- Source
- https://cve.org/CVERecord?id=CVE-2025-62371
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62371.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-62371
- Aliases
- Published
- 2025-10-15T17:25:43.428Z
- Modified
- 2026-07-15T23:11:48.390648Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- OpenSearch Data Prepper plugins trusts all SSL certificates by default
- Details
-
OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. Prior to this fix, the OpenSearch sink and source plugins would automatically use a trust all SSL strategy when connecting to OpenSearch clusters if no certificate path was explicitly configured. This behavior bypasses SSL certificate validation, potentially allowing attackers to intercept and modify data in transit through man-in-the-middle attacks. The vulnerability affects connections to OpenSearch when the cert parameter is not explicitly provided. This issue has been patched in version 2.12.2. As a workaround, users can add the cert parameter to their OpenSearch sink or source configuration with the path to the cluster's CA certificate.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62371.json", "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-295" ] }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62371.json
- https://github.com/opensearch-project/data-prepper/security/advisories/GHSA-43ff-rr26-8hx4
- https://nvd.nist.gov/vuln/detail/CVE-2025-62371
- https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99
- https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599
- https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56
Affected packages
Git / github.com/opensearch-project/data-prepper
Affected ranges
- Type
- GIT
- Repo
- https://github.com/opensearch-project/data-prepper
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixedFixed
- Database specific
{ "extracted_events": [ { "introduced": "0" }, { "fixed": "2.12.2" } ], "cpe": "cpe:2.3:a:amazon:opensearch_data_prepper:*:*:*:*:*:*:*:*", "source": [ "CPE_RANGE", "REFERENCES" ] }
Database specific
vanir_signatures_modified
"2026-07-15T23:11:48Z"
vanir_signatures
[
{
"signature_version": "v1",
"digest": {
"length": 142.0,
"function_hash": "328771396237993001574653133455301161295"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/source/opensearch/worker/client/OpenSearchClientFactory.java",
"function": "attachSSLContext"
},
"id": "CVE-2025-62371-0ad0e74a",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 984.0,
"function_hash": "124279101538758460511945441183721026297"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/integrationTest/java/org/opensearch/dataprepper/plugins/sink/opensearch/OpenSearchSinkIT.java",
"function": "initializeConfigurationMetadata"
},
"id": "CVE-2025-62371-0ba406f5",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 1254.0,
"function_hash": "67678753137454423474222854325322632959"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/test/java/org/opensearch/dataprepper/plugins/sink/opensearch/ConnectionConfigurationTests.java",
"function": "testCreateOpenSearchClientAwsServerlessDefault"
},
"id": "CVE-2025-62371-0e55bce1",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"130810857346768199710135292267899243804",
"188492180586859712030972050540533237273",
"100895440758563788319501779539900561029",
"328868309518585659858837578034155119808"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/HttpDBDownloadService.java"
},
"id": "CVE-2025-62371-0f19e80c",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599"
},
{
"signature_version": "v1",
"digest": {
"length": 1903.0,
"function_hash": "253308646513928247302417444119739019229"
},
"target": {
"file": "e2e-test/trace/src/integrationTest/java/org/opensearch/dataprepper/integration/trace/EndToEndServiceMapTest.java",
"function": "testPipelineEndToEnd"
},
"id": "CVE-2025-62371-103ef850",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 912.0,
"function_hash": "235249937099270047931260087544431338533"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/integrationTest/java/org/opensearch/dataprepper/plugins/sink/opensearch/OpenSearchIT.java",
"function": "testOpenSearchConnection"
},
"id": "CVE-2025-62371-10f5767f",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"56545256066659708135397695695565908538",
"162712635130553912911127938703368511802",
"230173640971102717319636201250874541190",
"52726702327357709354857443419341330301",
"212903784278794069613948873240933763617",
"260355775508394131064218383214078760334",
"214703045851166890734720819591539634064",
"202874681446015085960842031960091470158",
"103591587911696741803079467994422157009",
"38495782517823480571558955026984636552",
"11346094885029647352376267716628084814",
"18789638357204587492581687703015566904",
"110796083478410153780820598617617841882",
"297596499431266443299203917908355226029",
"223877861780904772835080432186860904619",
"293130934725776718357014579447967595934",
"293006426331503809804904341907712052303",
"293504742199921254010228438733768825390",
"293634147127963477412827472944205564338",
"121767491976004304345567505778996175254",
"260267389496284379968623479142499942134",
"123463594128727605886773432359971405480",
"130641604796326667856231324584528518211",
"177190139449782398234588183085149104824",
"153392225437644489504322582711568474239",
"174041506355193718175476391024384084075",
"266184156441870561659135118918599625284",
"208342608702984300162603016015318816377",
"28133073867959728753498567042130796285",
"292392850263238325408700831323246397331",
"314277434800811651019123192822391101719",
"269896297787878177264057369879008000393",
"135022677079930727507404549238535189263",
"290661375252996237667574434880539888405",
"106586443689619867113731104850360049473",
"62297453458934350543297719463054900076",
"250308771820158712629139379232074313421"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/DBSource.java"
},
"id": "CVE-2025-62371-1e5a3c7b",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"195667956509867682773583807462999136872",
"35087980461597264467474426466409024152",
"267930007379130823556403858860230876633",
"153378212373436833113804363979814840416"
],
"threshold": 0.9
},
"target": {
"file": "e2e-test/log/src/integrationTest/java/org/opensearch/dataprepper/integration/log/EndToEndBasicLogTest.java"
},
"id": "CVE-2025-62371-2080f521",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 62.0,
"function_hash": "280101518264916186506101499672281861987"
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/DBSource.java",
"function": "verify"
},
"id": "CVE-2025-62371-211f3ca0",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599"
},
{
"signature_version": "v1",
"digest": {
"length": 502.0,
"function_hash": "291146266028879395729263112710348046980"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/source/opensearch/worker/client/OpenSearchClientFactory.java",
"function": "createTrustManagers"
},
"id": "CVE-2025-62371-222d5107",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 502.0,
"function_hash": "291146266028879395729263112710348046980"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/source/opensearch/worker/client/OpenSearchClientFactory.java",
"function": "getCAStrategy"
},
"id": "CVE-2025-62371-24b12af7",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 260.0,
"function_hash": "297892233430096095391556411936315943588"
},
"target": {
"file": "e2e-test/log/src/integrationTest/java/org/opensearch/dataprepper/integration/log/ParallelGrokStringSubstituteLogTest.java",
"function": "prepareOpenSearchRestHighLevelClient"
},
"id": "CVE-2025-62371-25b27851",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 374.0,
"function_hash": "314385356766233989570141069563117051572"
},
"target": {
"file": "data-prepper-plugins/kafka-plugins/src/main/java/org/opensearch/dataprepper/plugins/kafka/util/CustomClientSslEngineFactory.java",
"function": "createClientSslEngine"
},
"id": "CVE-2025-62371-3600c6f9",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56"
},
{
"signature_version": "v1",
"digest": {
"length": 110.0,
"function_hash": "94451803247218254858076865408834360129"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/sink/opensearch/ConnectionConfiguration.java",
"function": "attachSSLContext"
},
"id": "CVE-2025-62371-47680f7a",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"217090105437533608284330269445872387559",
"18895960244188257672056027671186279213",
"282783797725073707981983726325208017613",
"323514807404104207744425716211634343660"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/kafka-plugins/src/main/java/org/opensearch/dataprepper/plugins/kafka/util/CustomClientSslEngineFactory.java"
},
"id": "CVE-2025-62371-576feeff",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"173573300758671992898532917721482213743",
"18214812536774463816878561700069764689",
"220093450048241952172328357432051721828",
"176425694423138127751782609435162843705",
"116285690282807917730092536719469720739",
"300149218608517874042831748984512192708",
"20995197345497636677329460542374676721",
"142958729827478120173853194057325603716",
"107672377327215599361713646242241485927",
"95978299804999596606423706794019163571",
"211962462157373708101823570006155244366",
"74209247870560074403901851257528738593",
"194979747025381993915647182409083670764",
"181365323100091325505768750047817145575",
"136936304732801460530009661778326793058"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/opensearch/src/test/java/org/opensearch/dataprepper/plugins/source/opensearch/worker/client/OpenSearchClientFactoryTest.java"
},
"id": "CVE-2025-62371-577c5f80",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"162080170240589619865093111798484558006",
"240440803507966517119497058530795154988",
"33236029476183815400124543337000714659",
"180014351853957772291626086417735258928"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/opensearch/src/integrationTest/java/org/opensearch/dataprepper/plugins/sink/opensearch/OpenSearchIT.java"
},
"id": "CVE-2025-62371-66022b4c",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"72773686259804087935964694872297455881",
"82929811042346624061466520444932513746",
"221569110038641105215938298225534891396",
"151156570944266105006118508297983296219"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/opensearch/src/integrationTest/java/org/opensearch/dataprepper/plugins/sink/opensearch/OpenSearchSinkIT.java"
},
"id": "CVE-2025-62371-6826ac47",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"195667956509867682773583807462999136872",
"329038388147839073911916295346893925462",
"339284579437563307049742983518333554216",
"126456099677523344526072152835554161075"
],
"threshold": 0.9
},
"target": {
"file": "e2e-test/trace/src/integrationTest/java/org/opensearch/dataprepper/integration/trace/EndToEndServiceMapTest.java"
},
"id": "CVE-2025-62371-6b76bc61",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 689.0,
"function_hash": "190338777320794246134025241159204723122"
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/HttpDBDownloadService.java",
"function": "initiateDownload"
},
"id": "CVE-2025-62371-72a22f77",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599"
},
{
"signature_version": "v1",
"digest": {
"length": 1648.0,
"function_hash": "299557818706188046215573754908311317276"
},
"target": {
"file": "e2e-test/trace/src/integrationTest/java/org/opensearch/dataprepper/integration/trace/EndToEndRawSpanTest.java",
"function": "testPipelineEndToEnd"
},
"id": "CVE-2025-62371-778b2e52",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"195667956509867682773583807462999136872",
"329038388147839073911916295346893925462",
"314640395829406157296501988789427049841",
"98110823650370320506925799991356152890"
],
"threshold": 0.9
},
"target": {
"file": "e2e-test/log/src/integrationTest/java/org/opensearch/dataprepper/integration/log/ParallelGrokStringSubstituteLogTest.java"
},
"id": "CVE-2025-62371-97e79aab",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 214.0,
"function_hash": "23430510193409229269280947846230462231"
},
"target": {
"file": "e2e-test/log/src/integrationTest/java/org/opensearch/dataprepper/integration/log/EndToEndBasicLogTest.java",
"function": "prepareOpenSearchRestHighLevelClient"
},
"id": "CVE-2025-62371-9af962a0",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"51188664799252877089206890961738011680",
"127382674864491338442961841777911659184",
"154795926582580003405270059037677966025",
"102653556844653363346819798246115310685",
"297733484548773807441372796254289314740",
"293007801619978616661150163283624187616",
"269333599754569881086976347698020524630",
"150811295054058421449235285662199294712",
"170390273872968701746163445048646381265",
"337762041554991266619571994794738207264",
"121878340127049006465177919148277956066",
"279077689345115664152907738893372348017",
"256992841363114488327844064825032342111",
"256600059029550530835648100423443851055",
"137506463677271444333324588245828529711",
"104161305791102657815946488607242691427",
"47050680412902110500537835630661460534",
"165229596331527876220517484357853242438",
"288916043210538778668065221815317383886",
"283140350018417832114560114624380560691",
"291444435967923590156406919300434579893"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/sink/opensearch/ConnectionConfiguration.java"
},
"id": "CVE-2025-62371-a423da61",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 392.0,
"function_hash": "337557596511373497107957625998434669539"
},
"target": {
"file": "data-prepper-plugins/kafka-plugins/src/main/java/org/opensearch/dataprepper/plugins/kafka/util/InsecureSslEngineFactory.java",
"function": "createClientSslEngine"
},
"id": "CVE-2025-62371-a470a407",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56"
},
{
"signature_version": "v1",
"digest": {
"length": 991.0,
"function_hash": "234542490418466096179110170364304239986"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/test/java/org/opensearch/dataprepper/plugins/source/opensearch/worker/client/OpenSearchClientFactoryTest.java",
"function": "createSdkAsyncHttpClient_with_self_signed_certificate"
},
"id": "CVE-2025-62371-ae4e0d15",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"195667956509867682773583807462999136872",
"329038388147839073911916295346893925462",
"314640395829406157296501988789427049841",
"98110823650370320506925799991356152890"
],
"threshold": 0.9
},
"target": {
"file": "e2e-test/peerforwarder/src/integrationTest/java/org/opensearch/dataprepper/integration/peerforwarder/EndToEndPeerForwarderTest.java"
},
"id": "CVE-2025-62371-b678ad4b",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"317420196754383256949020339509128086444",
"97134775752848153819084021758585135127",
"154935321684514715539080319467221700407",
"255146414053390971543039683483350312865"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/kafka-plugins/src/main/java/org/opensearch/dataprepper/plugins/kafka/util/InsecureSslEngineFactory.java"
},
"id": "CVE-2025-62371-baee61f8",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56"
},
{
"signature_version": "v1",
"digest": {
"length": 85.0,
"function_hash": "329253315268707928428986734916437383886"
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/DBSource.java",
"function": "checkClientTrusted"
},
"id": "CVE-2025-62371-bc394bdd",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"195667956509867682773583807462999136872",
"259268148426803077366362154125378740325",
"94148211628686580672700210594607581374",
"323970704659884596460947473249997089716"
],
"threshold": 0.9
},
"target": {
"file": "e2e-test/trace/src/integrationTest/java/org/opensearch/dataprepper/integration/trace/EndToEndRawSpanTest.java"
},
"id": "CVE-2025-62371-c4954d6e",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"263581072460816930862714710814740965127",
"317321049109206034475890705110661730530",
"15593509252982280033814617676095541169",
"23571092043464558347603050811254318959",
"159832355531087257020144274671824679841",
"173130182173984053749546911576648641991",
"189484559388610932843888551385094533111",
"119543174448799820931560284284572732881",
"139533408272536390833064868127605124675",
"21444959638920407564768767630349720696",
"115806459934130327158040315814671473396",
"205609206920647298525087768127499434097",
"166711060227143398129154772223606424654",
"278951923647429903883387374524918937584",
"103639348744157643080451226827453301663",
"326193630273444235735028001762259053234",
"82993250444463820023308192791435854693",
"124654055743917097368612564765722414400",
"225415406866174127183992024282476705377",
"134744997317830746784857815259128211941",
"8423709961686717655708761528936889026",
"189227130090652995071470673753718869912",
"123767918169608157858395327933912639883",
"208401875585945845426105511869095785674",
"108776401042258783963867234517040795127",
"207019096439197731621408224656529605277",
"266336058981713538576659620502335768131",
"60687065339440570260859884041536772028",
"139275860860550707755467017152799702799",
"186579339083853881910456173689006561449",
"317657514484756159497639863072807558338"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/source/opensearch/worker/client/OpenSearchClientFactory.java"
},
"id": "CVE-2025-62371-c4d242d3",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 225.0,
"function_hash": "178966852372703027544875096865276353978"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/sink/opensearch/ConnectionConfiguration.java",
"function": "attachSSLContext"
},
"id": "CVE-2025-62371-c96db9eb",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"56734523238289435070461840448033175891",
"281547838619642317120684965465259052546",
"222218340380233112297627564965295121746",
"239130540141040929780159251749872572283",
"111022522888834686683206711303312428561",
"244122178616566938829168020664625395349",
"243284788685287261593114513344454861863",
"36024312257179619851704877559471944858"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/opensearch/src/test/java/org/opensearch/dataprepper/plugins/sink/opensearch/ConnectionConfigurationTests.java"
},
"id": "CVE-2025-62371-caee396e",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 260.0,
"function_hash": "297892233430096095391556411936315943588"
},
"target": {
"file": "e2e-test/peerforwarder/src/integrationTest/java/org/opensearch/dataprepper/integration/peerforwarder/EndToEndLogMetricsTest.java",
"function": "prepareOpenSearchRestHighLevelClient"
},
"id": "CVE-2025-62371-cfb9322f",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 654.0,
"function_hash": "221618861621822108127417750221089631219"
},
"target": {
"file": "data-prepper-plugins/opensearch/src/main/java/org/opensearch/dataprepper/plugins/sink/opensearch/ConnectionConfiguration.java",
"function": "createTrustManagers"
},
"id": "CVE-2025-62371-d2ad076d",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"195667956509867682773583807462999136872",
"329038388147839073911916295346893925462",
"314640395829406157296501988789427049841",
"98110823650370320506925799991356152890"
],
"threshold": 0.9
},
"target": {
"file": "e2e-test/peerforwarder/src/integrationTest/java/org/opensearch/dataprepper/integration/peerforwarder/EndToEndLogMetricsTest.java"
},
"id": "CVE-2025-62371-e0337cfa",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
},
{
"signature_version": "v1",
"digest": {
"length": 85.0,
"function_hash": "329253315268707928428986734916437383886"
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/DBSource.java",
"function": "checkServerTrusted"
},
"id": "CVE-2025-62371-e1cc9a82",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599"
},
{
"signature_version": "v1",
"digest": {
"line_hashes": [
"206470429509426672843675373809986800913",
"233444430469118153177400067770891876859",
"63139954468904085341226550324700111443",
"215537890474440900640294263633829746624"
],
"threshold": 0.9
},
"target": {
"file": "data-prepper-plugins/geoip-processor/src/main/java/org/opensearch/dataprepper/plugins/geoip/extension/databasedownload/DBSource.java"
},
"id": "CVE-2025-62371-f1f8dd90",
"signature_type": "Line",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56"
},
{
"signature_version": "v1",
"digest": {
"length": 260.0,
"function_hash": "297892233430096095391556411936315943588"
},
"target": {
"file": "e2e-test/peerforwarder/src/integrationTest/java/org/opensearch/dataprepper/integration/peerforwarder/EndToEndPeerForwarderTest.java",
"function": "prepareOpenSearchRestHighLevelClient"
},
"id": "CVE-2025-62371-fd0c34c8",
"signature_type": "Function",
"deprecated": false,
"source": "https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62371.json"