CVE-2025-68390

4.9MEDIUM

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and

Publicado: 12/18/2025Atualizado: 12/23/2025
Ver no NVDVer no MITRE

Descrição

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

Análise IADesenvolvido por IA

Produtos Afetados

elasticelasticsearch
elasticelasticsearch
elasticelasticsearch
elasticelasticsearch

Referências