Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-68390

Опубликовано: 20 дек. 2025
Источник: msrc
CVSS3: 4.9
EPSS Низкий

Описание

Elasticsearch Allocation of Resources Without Limits or Throttling

EPSS

Процентиль: 34%
0.00137
Низкий

4.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 2 месяцев назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

CVSS3: 4.9
nvd
около 2 месяцев назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

CVSS3: 4.9
debian
около 2 месяцев назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elas ...

CVSS3: 4.9
github
около 2 месяцев назад

Elasticsearch privileged authenticated users can cause DoS through Excessive Resource Allocation

EPSS

Процентиль: 34%
0.00137
Низкий

4.9 Medium

CVSS3