CyberRota Analysis
AI-GeneratedA vulnerability in Elasticsearch permits low-privileged authenticated users to submit specially crafted documents that can monopolize a worker thread, leading to significant degradation in indexing availability on the affected node. This could result in denial-of-service conditions, impacting overall system performance. Organizations utilizing Elasticsearch should prioritize addressing this issue to maintain optimal service availability and prevent potential disruptions.
Original NVD Description
A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the availability of indexing operations on the affected node.