Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Elastic 资源管理错误漏洞
Vulnerability Description
Elastic是荷兰Elastic公司的一套基于Lucene构建的开源分布式RESTful搜索引擎。该产品主要应用于云计算，并支持通过HTTP使用JSON进行数据索引。 Elastic search 存在资源管理错误漏洞，该漏洞源于Grok查询触发Elasticsearch的过载。攻击者可利用该漏洞触发拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A