CVE-2024-52980
MediumAdvisory
Published 8 Apr 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.005
- 44th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 15
- of 17,781 indexed, latest versions
- Container images
- 16
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Elasticsearch Uncontrolled Resource Consumption vulnerability
Carried by container images the latest versions of 15 of 17,781 indexed charts deploy, on 16 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| elasticsearchmaven | 7.17.0, 7.17.1, 7.17.2, 7.17.3+11 more | 8.15.1 | 16 |
| elasticsearchbitnami | 8.12.1-0, 8.12.2-0 | 8.15.1 | 2 |
| Elasticsearchbitnami | 8.12.1-0, 8.12.2-0 | 8.15.1 | 2 |
Charts affected
15 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| sonarqubesonarqubeVerified publisher | 10.0.0+521 | 1 of 3See more | 6,556 |
| seafiledatamateVerified publisher | 0.6.0 | 1 of 6See more | 27,267 |
| repoflowrepoflow-helm-public | 0.9.1 | 1 of 8See more | 13,521 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 1 of 12See more | 38,346 |
| elasticinseefrlab | 2.2.0 | 1 of 2See more | 17,284 |
| clowder2ncsaVerified publisher | 1.9.7 | 1 of 12See more | 37,373 |
| portraitportraitVerified publisher | 0.2.13 | 2 of 8See more | 31,844 |
| elasticsearchromanow-helm-chartsVerified publisher | 1.7.1 | 1 of 2See more | 6,045 |
| airbyte-api-serverairbyteVerified publisher | 0.293.4 | 1 of 1See more | 854 |
| elasticsearch-umbrellaempathyco | 0.8.12 | 1 of 3See more | 10,564 |
| geonetwork-k8sgeonetwork-k8sVerified publisher | 4.2.8 | 2 of 5See more | 34,754 |
| elasticsearch-chartmy-elasticsearch | 0.1.0 | 1 of 2See more | 9,300 |
| rada-platformrada-platform | 0.1.0 | 1 of 7See more | 21,211 |
| sonarquberedhat-cop | 0.1.13 | 1 of 1See more | 4,203 |
| netforge-besvtechVerified publisher | 0.0.2 | 1 of 3See more | 4,674 |
Container images carrying it
16 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 5e6ac15bf6a5 | elasticsearch | 8.15.1 | 2 |
| airbyte/ | e1c5e7cfec8a | elasticsearch | 8.15.1 | 1 |
| bitnamilegacy/ | 15d4647fd491 | elasticsearch elasticsearch Elasticsearch | 8.15.1 8.15.1 8.15.1 | 1 |
| bitnamilegacy/ | 9cfd2df1294d | elasticsearch elasticsearch Elasticsearch | 8.15.1 8.15.1 8.15.1 | 1 |
| conductoross/ | 9fba127693e6 | elasticsearch | 8.15.1 | 1 |
| empathyco/ | 03e724e41eeb | elasticsearch | 8.15.1 | 1 |
| jingking/ | 43e74ab234e1 | elasticsearch | 8.15.1 | 1 |
| library/ | 310b9fc03b06 | elasticsearch | 8.15.1 | 1 |
| library/ | 332c6d416808 | elasticsearch | 8.15.1 | 1 |
| library/ | 88c2ec10c7f2 | elasticsearch | 8.15.1 | 1 |
| library/ | fdc73b3249c1 | elasticsearch | 8.15.1 | 1 |
| library/ | 0842dcd4c8f8 | elasticsearch | 8.15.1 | 1 |
| library/ | ef9723cf4fe4 | elasticsearch | 8.15.1 | 1 |
| treskon/ | 88e813f22347 | elasticsearch | 8.15.1 | 1 |
| trinodb/ | 38c6f24ab1a4 | elasticsearch | 8.15.1 | 1 |
| ghcr.io/ | aa45adaf59a7 | elasticsearch | 8.15.1 | 1 |