Elasticsearch

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-31419 Public exploit EPSS 61%

  Elasticsearch StackOverflow vulnerability

  A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

  Elastic Elasticsearch elasticsearch org.elasticsearch:elasticsearch Ubuntu Maven
  Oct 26, 2023
• Medium 6.5
  CVE-2021-22145 Public exploit Scanner template EPSS 76%

  Generation of Error Message Containing Sensitive Information in Elasticsearch

  A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing p…

  Elastic Elasticsearch elasticsearch org.elasticsearch.client:elasticsearch-rest-client Ubuntu Maven
  Jul 21, 2021