{"action":"Upgrade org.elasticsearch:elasticsearch to 7.17.21 (7.x) or 8.13.3 (8.x) or later.","affected":[{"fixed":"7.17.21","introduced":"0"},{"fixed":"8.13.3","introduced":"8.0.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2024-43709"],"ecosystem":"Maven","epss":0.00646,"exploited":false,"fixed_versions":["7.17.21","8.13.3"],"ghsa_id":"GHSA-jgx4-7v3v-vwfm","id":"tcs_01M5N92YYWKPYSNNRDWDZZFEZ5","modified_at":"2025-02-21T21:22:20.525774Z","published_at":"2025-01-21T12:30:47Z","references":["https://osv.dev/vulnerability/GHSA-jgx4-7v3v-vwfm","https://nvd.nist.gov/vuln/detail/CVE-2024-43709","https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442","https://github.com/elastic/elasticsearch","https://security.netapp.com/advisory/ntap-20250221-0007"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-jgx4-7v3v-vwfm","url":"https://osv.dev/vulnerability/GHSA-jgx4-7v3v-vwfm"}],"summary":"Elasticsearch allocation of resources without limits or throttling leads to crash"}