Vulnerability GHSA-ghfh-p92w-j4mg
Medium Risk
MEDIUM RISK
CVSS Score: 6.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
April 08, 2025 at 06:34 PM UTC
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
8.7.0 - 8.7.1 and 8.15.0
8.7.0 - 8.7.1 and 8.15.0
Summary
Elasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
Details
A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash.
A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.
Impacted packages
Timeline
Published
1 year ago
April 08, 2025 at 06:34 PM UTC
Fixed (8.15.1)
Unknown
Unknown
Last Modified
2 days ago
September 25, 2026 at 05:45 PM UTC