Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-52979

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.

Published

2025-05-01T14:15:35.690

Last Modified

2025-10-02T16:40:31.107

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application elastic elasticsearch < 7.17.25 Yes
Application elastic elasticsearch < 8.16.0 Yes
References