Most recent entries from all

BIT-elasticsearch-2024-52980 — Elasticsearch Uncontrolled Resource Consumption vulnerability

2026-10-06T17:17:29.255297+00:00

Affected: Bitnami: elasticsearch

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.

A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

certfr-2025-avi-0298 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta…

2026-10-06T17:17:29.255348+00:00

certfr-2025-avi-0298

EUVD-2026-227841

2026-10-06T17:17:29.255368+00:00

EUVD-2026-227841

fkie_cve-2024-52980

2026-10-06T17:17:29.255381+00:00

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.

A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

GHSA-ghfh-p92w-j4mg — Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function

2026-10-06T17:17:29.255403+00:00

Affected: Maven: org.elasticsearch:elasticsearch-grok

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.

A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

msrc_CVE-2024-52980 — Elasticsearch Uncontrolled Resource Consumption vulnerability

2026-10-06T17:17:29.255425+00:00

msrc_CVE-2024-52980

UBUNTU-CVE-2024-52980

2026-10-06T17:17:29.255440+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

WID-SEC-W-2025-0742 — Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of Service

2026-10-06T17:17:29.255458+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen.