CyberRota Analysis
AI-GeneratedElasticsearch is vulnerable to a denial-of-service attack due to a flaw that allows low-privileged authenticated users to submit crafted input, leading to unbounded recursion in an internal component. This results in stack exhaustion and causes the affected node process to terminate unexpectedly. Organizations using Elasticsearch, particularly those with low-privileged user access, should prioritize addressing this vulnerability to mitigate potential service disruptions.
Original NVD Description
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.