| Package | Affected versions | Patched versions |
|---|---|---|
| elasticsearch | ≥ 7.0.0, < 7.17.24≥ 8.0.0, < 8.15.0 | 7.17.248.15.0 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted bulk request that causes sustained high CPU consumption, which can render the affected node unable to process requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free