Elasticsearch

3 results · Clear filters · Feed

• High 7.5
  CVE-2026-115290 Public exploit

  Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

  Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An unauthenticated attacker with network access to the remote cluster server interface of a node can send a specially crafted…

  Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Wolfi
  Nov 3, 2026
• Medium 6.5
  CVE-2023-31419 Public exploit EPSS 61%

  Elasticsearch StackOverflow vulnerability

  A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

  Elastic Elasticsearch elasticsearch org.elasticsearch:elasticsearch Ubuntu Maven
  Oct 26, 2023
• Medium 6.5
  CVE-2021-22145 Public exploit Scanner template EPSS 76%

  Generation of Error Message Containing Sensitive Information in Elasticsearch

  A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing p…

  Elastic Elasticsearch elasticsearch org.elasticsearch.client:elasticsearch-rest-client Ubuntu Maven
  Jul 21, 2021