Lucene search
+L

2504 matches found

Github Security Blog
Github Security Blog
added 2025/05/01 3:31 p.m.18 views

Elasticsearch Uncontrolled Resource Consumption Vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

7.5CVSS6.9AI score0.00621EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/05/01 3:31 p.m.22 views

GHSA-MM3M-5497-XGGG Elasticsearch Uncontrolled Resource Consumption Vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

6.5CVSS6.7AI score0.00621EPSS
SaveExploits0References6
NVD
NVD
added 2025/05/01 2:15 p.m.19 views

CVE-2024-52979

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

7.5CVSS0.00621EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/01 2:15 p.m.11 views

UBUNTU-CVE-2024-52979

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

7.5CVSS7.1AI score0.00621EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/05/01 1:44 p.m.6 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via specifically crafted search templates with Mustache functions. An attacker can cause the Elasticsearch node to crash by sending malicious search templates. Details Denial of Service DoS describes a family of...

7.5CVSS7.1AI score0.00621EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/05/01 1:44 p.m.5 views

Denial of Service (DoS)

Overview org.elasticsearch:elasticsearch is a Distributed, RESTful Search Engine. Affected versions of this package are vulnerable to Denial of Service DoS via specifically crafted search templates with Mustache functions. An attacker can cause the Elasticsearch node to crash by sending malicious...

7.5CVSS7.1AI score0.00621EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/01 1:13 p.m.5 views

CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

6.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2025/05/01 1:13 p.m.150 views

CVE-2024-52979

CVE-2024-52979 : Uncontrolled Resource Consumption in Elasticsearch occurs when evaluating crafted Mustache-based search templates, potentially causing a Denial of Service by crashing the Elasticsearch node. The provided documents identify the affected software (Elasticsearch) and the underlying ...

7.5CVSS6.4AI score0.00621EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/01 1:13 p.m.24 views

CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

6.5CVSS0.00621EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/01 1:13 p.m.20 views

CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

6.5CVSS6.5AI score0.00621EPSS
SaveExploits0References1
Elastic
Elastic
added 2025/05/01 10:13 a.m.16 views

Elasticsearch 7.17.25 and 8.16.0 Security Update (ESA-2024-40)

Elasticsearch Uncontrolled Resource Consumption vulnerabilityESA-2024-40 Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash. Affected Versions:...

7.5CVSS6.9AI score0.00621EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/05/01 12:00 a.m.17 views

Elastic Elasticsearch 安全漏洞

Elastic Elasticsearch is a search engine based on the Lucene library from the Dutch company Elastic. A security vulnerability exists in Elastic Elasticsearch that stems from uncontrolled resource consumption when evaluating specially crafted search templates, which could lead to a denial of servi...

7.5CVSS5.3AI score0.00621EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/05/01 12:00 a.m.12 views

PT-2025-18390 · Elastic · Apm Server

Name of the Vulnerable Software and Affected Versions: Elasticsearch APM Server affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in APM Server error logs. This could happen when a bulk index request partially fails, causing parts of...

5.7CVSS5.9AI score0.00248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/01 12:00 a.m.5 views

PT-2025-18392 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: The issue is related to Uncontrolled Resource Consumption in Elasticsearch. It occurs when the system evaluates specifically crafted search templates that utilize Mustache functions...

6.5CVSS4.2AI score0.00621EPSS
SaveExploits0References8
Chainguard
Chainguard
added 2025/04/18 7:14 p.m.35 views

CVE-2025-31672 vulnerabilities

Vulnerabilities for packages: opensearch, ranger...

5.3CVSS6.2AI score0.01332EPSS
SaveExploits0
Chainguard
Chainguard
added 2025/04/18 7:13 p.m.15 views

GHSA-GMG8-593G-7MV3 vulnerabilities

Vulnerabilities for packages: opensearch, ranger...

5.3AI score
SaveExploits0
Veracode
Veracode
added 2025/04/17 7:46 a.m.125 views

Denial Of Service (DoS)

Elasticsearch is vulnerable to Denial Of Service DoS. The vulnerability is due to unbounded recursion due to improper handling of deeply nested GeometryCollection objects in Well-Known Text WKT format, which allows attackers to craft specially formatted input that triggers a stack overflow and...

7.5CVSS7AI score0.00572EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
added 2025/04/17 7:02 a.m.20 views

Denial Of Service (DoS)

org.elasticsearch, elasticsearch is vulnerable to a Denial Of Service DoS. The vulnerability is due to a large recursion issue caused by the innerForbidCircularReferences function of the PatternBank class, which allows a user with the readpipeline privilege to crash the node...

6.5CVSS6.6AI score0.00537EPSS
SaveExploits0References5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:33 a.m.31 views

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Elasticsearch denial of service vulnerabilitiy(CVE-2024-23449)

Summary A potential denial of service vulnerability CVE-2024-23449 has been identified related to Elasticsearch that affects IBM Watson CP4D Data Stores. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-23449 DESCRIPTION:...

5.3CVSS5AI score0.00681EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/15 3:31 a.m.16 views

Security Bulletin: Vulnerability in Elasticsearch (CVE-2023-49921) affects IBM Watson CP4D Data Stores

Summary A potential vulnerability CVE-2023-49921 has been identified related to Elasticsearch that may affect IBM Watson CP4D Data Stores. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-49921 DESCRIPTION: An issue was...

6.5CVSS5.7AI score0.00445EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder