CVE-2025-68384

6.5MEDIUM

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of s

公開日: 12/18/2025更新日: 12/23/2025
NVDで表示MITREで表示

説明

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.

AI分析AIによる分析

影響を受ける製品

elasticelasticsearch
elasticelasticsearch
elasticelasticsearch
elasticelasticsearch

参照