Nexent Unauthorized Arbitrary File Deletion Vulnerability in ElasticSearch Service Interface

A vulnerability allowing unauthorized arbitrary file deletion has been identified in the Nexent backend service version 1.7.5.2. This issue arises within the ElasticSearch service interface, specifically at the DELETE /{index_name}/documents endpoint, which lacks proper authentication and authorization controls. The endpoint also fails to validate the user-supplied path_or_url parameter, enabling unauthenticated remote attackers to send crafted requests that delete arbitrary documents from ElasticSearch indices and corresponding files from the MinIO storage system. Exploitation of this vulnerability leads to data destruction and a denial-of-service condition.

Impact

Successful exploitation allows for the unauthorized deletion of documents from ElasticSearch indices and the corresponding files from the MinIO storage system, causing data loss and a denial-of-service condition.