Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
MEDIUM 6.5 Maven

Elasticsearch Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function

GHSA-ghfh-p92w-j4mg · BIT-elasticsearch-2024-52980 · CVE-2024-52980

Published · Modified

Description

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.

A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

Ready to move

Start Securing

Free, no credit card | First findings in minutes