Denial Of Service (DoS)

org.elasticsearch, elasticsearch is vulnerable to a Denial Of Service DoS. The vulnerability is due to a large recursion issue caused by the innerForbidCircularReferences function of the PatternBank class, which allows a user with the readpipeline privilege to crash the node...

CVE-2024-52980

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have readpipeline Elasticsearch cluster privilege assigned to the...

CVE-2024-52980: Uncontrolled Resource Consumption

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have readpipeline Elasticsearch cluster privilege assigned to the...