Technical impact
Uncontrolled Resource Consumption (CWE‑400) and Excessive Allocation (CWE‑770) in Elasticsearch can lead to a denial‑of‑service when an attacker sends requests that cause the cluster to allocate excessive memory or CPU. The issue is linked to Excessive Allocation (CAPEC‑130), meaning that repeatedly crafted queries can push the engine beyond its normal operating thresholds. The resulting denial of service can prevent the search service from responding to legitimate traffic, disrupting any downstream applications that rely on the cluster.
Affected Systems
Affected product is Elastic:Elasticsearch. No specific versions are enumerated in the data, so any deployment of Elasticsearch that lacks the resource‑consumption fix could be vulnerable.
Risk and Exploitability
The CVSS score of 6.5 indicates moderate severity. The EPSS score of 0.00411 (0.41%) shows a very low but non‑zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, indicating no confirmed exploits. Attackers would likely target the Elasticsearch HTTP/JSON API, but the lack of explicit vector information means a variety of input methods could trigger the issue.
