Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-115290 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads…

Description

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An unauthenticated attacker with network access to the remote cluster server interface of a node can send a specially crafted request that causes the node to terminate. No credentials are required. The attacker can repeat the request against each reachable node.

Produits et versions touchés

Produit Versions touchées Corrigé en
Elasticsearch 9.5 9.5.0 → 9.5.5 Pas de correctif indiqué
Elasticsearch 9.0 9.0.0 → 9.4.8 Pas de correctif indiqué
Elasticsearch 8.10 8.10.0 → 8.19.23 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Elasticsearch

Les 91 CVE de Elasticsearch →
CVE-2026-115715 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service via a… 6.5 Moyenne CVE-2026-115710 Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and… 4.2 Moyenne CVE-2026-115298 Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not… 4.3 Moyenne CVE-2026-103009 Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a… 7.1 Élevée
Suivre cette CVE