← Database

CVE-2024-52980

MEDIUM CVSS: 6.5 Published: 2025-04-08 Modified: 2026-06-17

Description

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBank class could cause the Elasticsearch node to crash. A successful attack requires a malicious user to have read_pipeline Elasticsearch cluster privilege assigned to them.

Affected Platforms

Elastic Elasticsearch

Weakness Type

CWE-400

References