CVE-2025-9624 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch…
High CVSS: 8.3

CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.



This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.
Vendor
Amazon
Product
Opensearch
CWE
CWE-674
Yayın Tarihi
2025-11-25 20:16:01
Güncelleme
2025-12-15 14:15:57
Source Identifier
help@fluidattacks.com
KEV Date Added
-

Kategoriler

CWE-674 Opensearch HIGH Amazon 2025

Referanslar

https://fluidattacks.com/advisories/chick https://github.com/opensearch-project/OpenSearch/releases/tag/2.19.4 https://github.com/opensearch-project/OpenSearch/releases/tag/3.3.0