Elasticsearch Uncontrolled Resource Consumption Vulnerability Leading to Denial-of-Service

A vulnerability allowing uncontrolled resource consumption has been identified in Elasticsearch. This issue arises when the application evaluates specially crafted search templates that use Mustache functions. The flaw can cause a denial-of-service condition by crashing the Elasticsearch node.

Impact

Exploitation of this vulnerability can cause the Elasticsearch node to crash, leading to a denial-of-service condition.

Remediation

Users can upgrade to Elasticsearch versions 7.17.25 or 8.16.0 to address this vulnerability.