CVE-2025-37729

9.1CRITICAL

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing c

Veröffentlicht: 10/13/2025Aktualisiert: 12/11/2025
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

Improper neutralization of special elements used in a template engine in Elastic Cloud Enterprise (ECE) can lead to a malicious actor with Admin access exfiltrating sensitive information and issuing commands via a specially crafted string where Jinjava variables are evaluated.

KI-AnalyseKI-gestützt

Betroffene Produkte

elasticelastic_cloud_enterprise
elasticelastic_cloud_enterprise

Referenzen