MEDIUM 4.9 Maven
Elasticsearch privileged authenticated users can cause DoS through Excessive Resource Allocation
GHSA-gphj-4h6p-37xq · BIT-elasticsearch-2025-68390 · CVE-2025-68390
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.
Ready to move
Start Securing
Free, no credit card | First findings in minutes