Miggo Logo

CVE-2024-52981: Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion

4.9

CVSS Score
3.1

Basic Information

EPSS Score
0.17144%
Published
4/8/2025
Updated
4/9/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.elasticsearch:elasticsearchmaven>= 7.17.0, <= 7.17.237.17.24
org.elasticsearch:elasticsearchmaven>= 8.0.0-alpha1, <= 8.15.08.15.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

*n issu* w*s *is*ov*r** in *l*sti*s**r**, w**r* * l*r** r**ursion usin* t** W*ll-KnownT*xt *orm*tt** strin* wit* n*st** **om*try*oll**tion o*j**ts *oul* **us* * st**kov*r*low.

Reasoning

No *n*lysis *v*il**l*