{"id":1482,"date":"2026-08-31T23:04:25","date_gmt":"2026-08-31T20:04:25","guid":{"rendered":"https:\/\/www.tayfnews.tech\/tr\/?p=1482"},"modified":"2026-08-31T23:04:25","modified_gmt":"2026-08-31T20:04:25","slug":"opensearch-sql-eklentisi-sunuculari-kod-calistirmaya-aciyor","status":"publish","type":"post","link":"https:\/\/www.tayfnews.tech\/tr\/technology\/opensearch-sql-eklentisi-sunuculari-kod-calistirmaya-aciyor\/","title":{"rendered":"OpenSearch SQL Eklentisi Sunucular\u0131 Kod \u00c7al\u0131\u015ft\u0131rmaya A\u00e7\u0131yor"},"content":{"rendered":"<p><strong>CVE-2026-83497<\/strong> olarak tan\u0131mlanan kritik bir g\u00fcvenlik zaafiyeti, <strong>OpenSearch SQL eklentisi<\/strong> i\u00e7inde ke\u015ffedildi ve bu durum, kendi kendini y\u00f6neten da\u011f\u0131t\u0131mlar\u0131 ile bulut ortamlar\u0131n\u0131 potansiyel uzaktan kod y\u00fcr\u00fctme riskine a\u00e7\u0131k hale getiriyor. 31.08.2026 tarihinde 2026-092-AWS B\u00fclten Kimli\u011fi ile yay\u0131nlanan bu a\u00e7\u0131k, veritaban\u0131 u\u00e7 noktas\u0131n\u0131n sayfalama mekanizmas\u0131ndaki k\u0131s\u0131tlanmam\u0131\u015f Java serile\u015ftirme i\u015flemeden kaynaklanmaktad\u0131r. Temel okuma ve arama izinlerine sahip tehdit akt\u00f6rleri, k\u00f6t\u00fc ama\u00e7l\u0131 olarak haz\u0131rlanm\u0131\u015f bir imle\u00e7 (cursor) parametresini do\u011frudan plugins\/sql u\u00e7 noktas\u0131na g\u00f6ndererek bu zaafiyetten yararlanabilir; b\u00f6ylece g\u00fcvenlik s\u0131n\u0131rlar\u0131n\u0131 atlay\u0131p temel sunucu altyap\u0131s\u0131 \u00fczerinde iste\u011fe ba\u011fl\u0131 kod \u00e7al\u0131\u015ft\u0131rabilirler.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_87 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/opensearch-sql-eklentisi-sunuculari-kod-calistirmaya-aciyor\/#Java_Serilestirme_Aciklarinin_Mantigini_Anlamak\" >Java Serile\u015ftirme A\u00e7\u0131klar\u0131n\u0131n Mant\u0131\u011f\u0131n\u0131 Anlamak<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/opensearch-sql-eklentisi-sunuculari-kod-calistirmaya-aciyor\/#Etkilenen_Surumler_ve_Kapsamli_Duzeltme_Kapsami\" >Etkilenen S\u00fcr\u00fcmler ve Kapsaml\u0131 D\u00fczeltme Kapsam\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.tayfnews.tech\/tr\/technology\/opensearch-sql-eklentisi-sunuculari-kod-calistirmaya-aciyor\/#Sistem_Yoneticileri_Icin_Eylem_Maddeleri\" >Sistem Y\u00f6neticileri \u0130\u00e7in Eylem Maddeleri<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Java_Serilestirme_Aciklarinin_Mantigini_Anlamak\"><\/span>Java Serile\u015ftirme A\u00e7\u0131klar\u0131n\u0131n Mant\u0131\u011f\u0131n\u0131 Anlamak<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>K\u0131s\u0131tlanmam\u0131\u015f Java serile\u015ftirme, bir uygulaman\u0131n g\u00fcvenilmeyen verileri uygun do\u011frulama veya g\u00fcvenlik filtreleri olmadan nesnelere d\u00f6n\u00fc\u015ft\u00fcrmesi durumunda ortaya \u00e7\u0131kan ciddi bir g\u00fcvenlik zaafiyeti kategorisidir. OpenSearch gibi veritaban\u0131 analiti\u011fi motorlar\u0131 ve arama \u00e7er\u00e7eveleri ba\u011flam\u0131nda, imle\u00e7 sayfalama (cursor pagination) gibi \u00f6zellikler, b\u00fcy\u00fck veri setlerini birden fazla ard\u0131\u015f\u0131k sorgu \u00fczerinden y\u00f6netmek i\u00e7in durum bilgisini serile\u015ftirmeye dayan\u0131r. Uygulama, imle\u00e7 dizeleri gibi parametreler arac\u0131l\u0131\u011f\u0131yla iletilen gelen nesne ak\u0131\u015flar\u0131na k\u00f6r\u00fc k\u00f6r\u00fcne g\u00fcvenir ve bunlar\u0131 serile\u015ftirmeden \u00e7\u0131kar\u0131rsa, bir sald\u0131rgan \u00f6zel olarak olu\u015fturulmu\u015f serile\u015ftirilmi\u015f y\u00fckler kurgulayabilir. Arka u\u00e7 bu y\u00fckleri i\u015fledi\u011finde, \u00e7al\u0131\u015fma zaman\u0131 ortam\u0131 g\u00f6m\u00fcl\u00fc talimatlar\u0131 y\u00fcr\u00fct\u00fcr ve bu durum do\u011frudan tam sistemin ele ge\u00e7irilmesine yol a\u00e7ar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Etkilenen_Surumler_ve_Kapsamli_Duzeltme_Kapsami\"><\/span>Etkilenen S\u00fcr\u00fcmler ve Kapsaml\u0131 D\u00fczeltme Kapsam\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bu ke\u015fif, hem a\u00e7\u0131k kaynakl\u0131 da\u011f\u0131t\u0131mlar\u0131n hem de kurumsal y\u00f6netimli bulut hizmetlerinin birden fazla s\u00fcr\u00fcm\u00fcn\u00fc etkilemektedir. Kendi altyap\u0131lar\u0131n\u0131 y\u00f6neten y\u00f6neticiler, maruz kalma seviyelerini belirlemek ve gerekli yamalar\u0131 uygulamak i\u00e7in ortamlar\u0131n\u0131 derhal incelemelidir. Zaafiyet, belirli bir yaz\u0131l\u0131m s\u00fcr\u00fcm\u00fc aral\u0131\u011f\u0131n\u0131 kapsamakta olup olas\u0131 istismarlara kar\u015f\u0131 tam koruma sa\u011flamak i\u00e7in belirli y\u00fckseltme yollar\u0131 gerektirmektedir.<\/p>\n<ul>\n<li><strong>OpenSearch SQL Eklentisi (Kendi Y\u00f6netiminizdeki):<\/strong> Etkilenen s\u00fcr\u00fcmler v2.8 s\u00fcr\u00fcm\u00fcnden v3.6 s\u00fcr\u00fcm\u00fcne (dahil) kadar olan aral\u0131\u011f\u0131 kapsamaktad\u0131r.<\/li>\n<li><strong>OpenSearch SQL Eklentisi (D\u00fczeltilen S\u00fcr\u00fcmler):<\/strong> 3.7 ve 2.19.6 s\u00fcr\u00fcmlerinde \u00e7\u00f6z\u00fclm\u00fc\u015ft\u00fcr.<\/li>\n<li><strong>Amazon OpenSearch Service (AWS Y\u00f6netimli):<\/strong> Etkilenen s\u00fcr\u00fcmler v2.9 ile v3.5 aras\u0131ndaki aral\u0131ktad\u0131r.<\/li>\n<li><strong>Amazon OpenSearch Service (Azaltma \u00d6nlemi):<\/strong> v2.9 ile v3.5 aras\u0131ndaki s\u00fcr\u00fcmleri kapsayan otomatik servis yaz\u0131l\u0131m\u0131 g\u00fcncellemeleri arac\u0131l\u0131\u011f\u0131yla do\u011frudan yamalanm\u0131\u015ft\u0131r.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Sistem_Yoneticileri_Icin_Eylem_Maddeleri\"><\/span>Sistem Y\u00f6neticileri \u0130\u00e7in Eylem Maddeleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Kendi y\u00f6netti\u011fi OpenSearch k\u00fcmelerini i\u015fleten g\u00fcvenlik ekipleri, aktif da\u011f\u0131t\u0131m dal\u0131na ba\u011fl\u0131 olarak SQL eklentisini 3.7 veya 2.19.6 s\u00fcr\u00fcm\u00fcne y\u00fckseltmeye \u00f6ncelik vermelidir. Y\u00f6netilen Amazon OpenSearch Service kullanan kurulu\u015flar i\u00e7in AWS, v2.9 ile v3.5 s\u00fcr\u00fcm\u00fc aras\u0131ndaki etkilenen k\u00fcmeleri g\u00fcvence alt\u0131na almak amac\u0131yla hedefli servis yaz\u0131l\u0131m\u0131 g\u00fcncellemeleri yay\u0131nlam\u0131\u015ft\u0131r. Okuma ve arama yetkilerini s\u0131n\u0131rlamak i\u00e7in eri\u015fim kontrollerini g\u00f6zden ge\u00e7irmek de, kimli\u011fi do\u011frulanm\u0131\u015f tehdit akt\u00f6rleriyle ili\u015fkili risk profilini en aza indirmek ad\u0131na etkili bir derinlemesine savunma \u00f6nlemi olarak hizmet edebilir.<\/p>\n<p><em>Kaynak: <a href=\"https:\/\/aws.amazon.com\/security\/security-bulletins\/rss\/2026-092-aws\/\" target=\"_blank\" rel=\"noopener noreferrer\">Orijinal Makale<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Uzaktan kod y\u00fcr\u00fctmeye izin veren OpenSearch SQL eklentisi imle\u00e7 sayfalama Java serile\u015ftirme zaafiyeti CVE-2026-83497 hakk\u0131nda detaylar\u0131 ke\u015ffedin.<\/p>\n","protected":false},"author":1,"featured_media":1481,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"googlesitekit_rrm_CAowrrDMDA:productID":"","tayfnews_source_url":"","footnotes":"","rank_math_focus_keyword":"OpenSearch SQL eklentisi, uzaktan kod y\u00fcr\u00fctme, Java serile\u015ftirme, G\u00fcvenlik, Zaafiyet, Yaz\u0131l\u0131m","rank_math_title":"OpenSearch SQL Eklentisi Sunucular\u0131 Kod \u00c7al\u0131\u015ft\u0131rmaya A\u00e7\u0131yor","rank_math_description":"Uzaktan kod y\u00fcr\u00fctmeye izin veren OpenSearch SQL eklentisi imle\u00e7 sayfalama Java serile\u015ftirme zaafiyeti CVE-2026-83497 hakk\u0131nda detaylar\u0131 ke\u015ffedin."},"categories":[2],"tags":[],"class_list":["post-1482","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/1482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/comments?post=1482"}],"version-history":[{"count":1,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/1482\/revisions"}],"predecessor-version":[{"id":1483,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/posts\/1482\/revisions\/1483"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media\/1481"}],"wp:attachment":[{"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/media?parent=1482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/categories?post=1482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tayfnews.tech\/tr\/wp-json\/wp\/v2\/tags?post=1482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}