Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-68390

Опубликовано: 20 дек. 2025
Источник: msrc
CVSS3: 4.9
EPSS Низкий

Описание

Elasticsearch Allocation of Resources Without Limits or Throttling

EPSS

Процентиль: 39%
0.00179
Низкий

4.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.9
ubuntu
3 месяца назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

CVSS3: 4.9
redhat
3 месяца назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

CVSS3: 4.9
nvd
3 месяца назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

CVSS3: 4.9
debian
3 месяца назад

Allocation of Resources Without Limits or Throttling (CWE-770) in Elas ...

CVSS3: 4.9
github
3 месяца назад

Elasticsearch privileged authenticated users can cause DoS through Excessive Resource Allocation

EPSS

Процентиль: 39%
0.00179
Низкий

4.9 Medium

CVSS3