CVE-2025-25012
- Source
- https://cve.org/CVERecord?id=CVE-2025-25012
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25012.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-25012
- Aliases
- Downstream
- Related
- Published
- 2025-06-25T11:52:53.699Z
- Modified
- 2026-07-15T21:28:14.103194Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- Kibana Open Redirect
- Details
-
URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.
- Database specific
{ "cwe_ids": [ "CWE-601" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25012.json", "cna_assigner": "elastic" }- References
Affected packages
Git / github.com/elastic/elasticsearch
Affected ranges
- Type
- GIT
- Repo
- https://github.com/elastic/elasticsearch
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "cpe": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "7.0.0" }, { "fixed": "7.17.29" }, { "introduced": "8.0.0" }, { "fixed": "8.17.8" }, { "introduced": "8.18.0" }, { "fixed": "8.18.3" }, { "introduced": "9.0.0" }, { "fixed": "9.0.3" } ], "source": "CPE_RANGE" }
- Type
- GIT
- Repo
- https://github.com/elastic/kibana
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
{ "cpe": "cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "7.0.0" }, { "fixed": "7.17.29" }, { "introduced": "8.0.0" }, { "fixed": "8.17.8" }, { "introduced": "8.18.0" }, { "fixed": "8.18.3" }, { "introduced": "9.0.0" }, { "fixed": "9.0.3" } ], "source": "CPE_RANGE" }
Database specific
vanir_signatures
[
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryQuantizedVectorsReader.java",
"function": "getRandomVectorScorer"
},
"id": "CVE-2025-25012-0daa79a5",
"signature_type": "Function",
"digest": {
"length": 525.0,
"function_hash": "138500781664115051745568329746266332244"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java",
"function": "testMergeTasksAreUnblockedWhenMoreDiskSpaceBecomesAvailable"
},
"id": "CVE-2025-25012-203607c4",
"signature_type": "Function",
"digest": {
"length": 4601.0,
"function_hash": "114340430715461535395453156931583844905"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c",
"deprecated": false,
"target": {
"file": "build-tools/src/main/java/org/elasticsearch/gradle/plugin/PluginBuildPlugin.java"
},
"id": "CVE-2025-25012-27c0ea2c",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"325346763520944012913154789921944685178",
"61552211637263319266280212069306163976",
"238965232618491914774102510476003231761",
"91842554885795545908575250797740073380",
"41186032155842938062122952139992001177",
"26650412168015143841783692789907731833",
"156855889974115839096909303362391651478",
"5255688417597662836316466950746456815",
"267688007740415870942430918212022655160",
"123593297690308739122442988051348431664",
"207083930239604338592887667635525018029",
"285979066839997041627241454323751656105",
"89817169799828182270847485303899076995",
"259726165486981002704425065102702119655",
"228443004802496231376269442754123243387",
"110553570186771583072883260970124481256",
"159259824297904330471361141933251778658",
"15965688380580672478116053669808152101",
"33955976224007740005314928988632842514",
"189421514390395652693360186541539881292",
"235537949590647007651887994723552170873",
"160154105448877168464243405801723143273"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/action/support/replication/TransportReplicationAllPermitsAcquisitionTests.java",
"function": "testTransportReplicationActionWithAllPermits"
},
"id": "CVE-2025-25012-2ab47e3e",
"signature_type": "Function",
"digest": {
"length": 4960.0,
"function_hash": "316492153615631109933469148045973651998"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java",
"function": "testEnqueuedAndBackloggedMergesAreStillExecutedWhenThreadPoolIsShutdown"
},
"id": "CVE-2025-25012-2b326a54",
"signature_type": "Function",
"digest": {
"length": 3346.0,
"function_hash": "58245096897601243573986666997638366710"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java",
"function": "testTargetIORateChangesWhenSubmittingMergeTasks"
},
"id": "CVE-2025-25012-2ff60d13",
"signature_type": "Function",
"digest": {
"length": 2358.0,
"function_hash": "277372784463831650673181036537326562713"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java"
},
"id": "CVE-2025-25012-374f15ac",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"307691308776613465939274719738766445510",
"289330628909240392634313024219462074471",
"215459541240381812089653801057234809951",
"195601705674340086576045960890022459903",
"63567567690210632948332546359113978043",
"314267534669116641632784081485548282938",
"62345402823509629603668591916344770904",
"84630478335641272663136997410200042138",
"63567567690210632948332546359113978043",
"314267534669116641632784081485548282938",
"316366976826873294442033849823430927226",
"170080810076840276635196887307379880191",
"282313366995788747323617726626351808497",
"314267534669116641632784081485548282938",
"326551910102055103260865436297764321621",
"40512608325414184918675501537491319060",
"43941708160349525473059269169092050580",
"225248846417230559201373759739093348990",
"252031580928537639581915915556426392837",
"117156754148631786935824217294441628634",
"183457692449573878653557319674525850268",
"225248846417230559201373759739093348990",
"5832801963475927524882496922041584898",
"320510010116594963399405726212220688679"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java",
"function": "testAvailableDiskSpaceMonitorSettingsUpdate"
},
"id": "CVE-2025-25012-3a548667",
"signature_type": "Function",
"digest": {
"length": 3459.0,
"function_hash": "218795969899732352235877274137524817264"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java",
"function": "testUnavailableBudgetBlocksNewMergeTasksFromStartingExecution"
},
"id": "CVE-2025-25012-4b317b56",
"signature_type": "Function",
"digest": {
"length": 3806.0,
"function_hash": "24314280653182670704448609019036719364"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/shard/RefreshListenersTests.java"
},
"id": "CVE-2025-25012-4effdae8",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200769306572901182738284701263119023916",
"197041028791178570388294868437166239354",
"175312629887710913869782170769833841949",
"71917613768352789768530191998911901158"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c",
"deprecated": false,
"target": {
"file": "build-tools/src/main/java/org/elasticsearch/gradle/plugin/PluginBuildPlugin.java",
"function": "configurePublishing"
},
"id": "CVE-2025-25012-53cfa8b6",
"signature_type": "Function",
"digest": {
"length": 872.0,
"function_hash": "217069498392094122099161240975043925563"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/engine/ElasticsearchConcurrentMergeScheduler.java"
},
"id": "CVE-2025-25012-5bc55e8f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"48097110980652127930355540195489084594",
"81805432323412997011181710135590440377",
"171782271863759147025299528472839169997"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryQuantizedVectorsReader.java"
},
"id": "CVE-2025-25012-6288d7d5",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"183850627859327718168394210217943252030",
"119440713605327602976381465093838591062",
"290792060009342839573640089321290868726",
"270976080975149282971018854224572759720"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java",
"function": "testBackloggedMergeTasksExecuteExactlyOnce"
},
"id": "CVE-2025-25012-668e6a1c",
"signature_type": "Function",
"digest": {
"length": 2058.0,
"function_hash": "251155605364346625738409169836128342675"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java",
"function": "testThreadPoolStatsWithBackloggedMergeTasks"
},
"id": "CVE-2025-25012-6fb4e088",
"signature_type": "Function",
"digest": {
"length": 1983.0,
"function_hash": "229700642717570257835356427519595463377"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c",
"deprecated": false,
"target": {
"file": "build-conventions/src/main/java/org/elasticsearch/gradle/internal/conventions/PublishPlugin.java"
},
"id": "CVE-2025-25012-7365feaf",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"270464534409354986261763716525045464983",
"227207832886699725163045304921806508418",
"82592531520277924985580254628226686204",
"116285117003426191198584459082216742860",
"63126585333495968821346326973767482129",
"281915879393945016910658230161970023819",
"158179363007626669286354249716512138616",
"255192158583294586491439740642803969954"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryFlatVectorsScorer.java",
"function": "getRandomVectorScorer"
},
"id": "CVE-2025-25012-79c748f3",
"signature_type": "Function",
"digest": {
"length": 703.0,
"function_hash": "246389076578088141726765604445735553642"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java",
"function": "testBackloggedMergeTasksDoNotHoldUpBudget"
},
"id": "CVE-2025-25012-7a47ff20",
"signature_type": "Function",
"digest": {
"length": 4015.0,
"function_hash": "208757528726588159332625699170358379991"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryFlatVectorsScorer.java"
},
"id": "CVE-2025-25012-7a61862c",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"111224654851700685150749621543526826024",
"54683282904885283459823976506809506697",
"334831851779868906931383438391473488459",
"298409900482534359175246209039761711352"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryQuantizedVectorsFormatTests.java"
},
"id": "CVE-2025-25012-821c4c5b",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"321898834984636408459994041876775684978",
"54469443586630274578992100240906916611",
"161102368737906265041493293778631132536",
"167555618741137417416616345551408800379",
"17086379705161662859808635588599426085",
"49478537944292540195752568243242909031",
"8497397533526139794711497608530584719",
"97983651176895854092372582947426511495",
"262175765616900540679876344022161215001",
"6432720316142191080545473669787022077",
"236597937580226699090360365870000212126",
"153395696997859798495959299562487030223",
"125268921903633756733297704068371718232",
"98805655321375081409252598279695212410",
"323868577050463108012912504659974416425",
"211193098417061433479009651036717606288",
"49944783418633659813184537346346790721",
"11100206399938346665215749161424971610",
"139815414802687107609303091718747250968",
"263740860555575463194741873456346063854",
"284892214128400301707615304140756220795",
"214764128951241853848427377603934929745"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/engine/ThreadPoolMergeScheduler.java"
},
"id": "CVE-2025-25012-82ccd7de",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"213183768922419533013202803947277341310",
"277217446968631274613561542943234574513",
"215064158321182856550655269006048219996",
"65546216993739219098055840369500337784",
"202372387126590055595216950319796075929",
"280754281191561536932138165543058822551",
"291327381337858814575392363199778376893",
"325517111645249999307143771805879967976"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/action/support/replication/TransportReplicationAllPermitsAcquisitionTests.java"
},
"id": "CVE-2025-25012-85b6dd4c",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"68803058418137026878114166105668880209",
"108587633537507210242609878158511307392",
"38433856949351724459033651305753252885",
"112754644778537773866754798965204519700"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/replication/IndexLevelReplicationTests.java",
"function": "testLateDeliveryAfterGCTriggeredOnReplica"
},
"id": "CVE-2025-25012-88fcd718",
"signature_type": "Function",
"digest": {
"length": 1129.0,
"function_hash": "75475225616193343904521083743406012413"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryQuantizedVectorsFormatTests.java"
},
"id": "CVE-2025-25012-8c2a7093",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"321898834984636408459994041876775684978",
"54469443586630274578992100240906916611",
"161102368737906265041493293778631132536",
"167555618741137417416616345551408800379",
"17086379705161662859808635588599426085",
"49478537944292540195752568243242909031",
"8497397533526139794711497608530584719",
"97983651176895854092372582947426511495",
"262175765616900540679876344022161215001",
"6432720316142191080545473669787022077",
"236597937580226699090360365870000212126",
"153395696997859798495959299562487030223",
"125268921903633756733297704068371718232",
"98805655321375081409252598279695212410",
"323868577050463108012912504659974416425",
"211193098417061433479009651036717606288",
"49944783418633659813184537346346790721",
"11100206399938346665215749161424971610",
"139815414802687107609303091718747250968",
"263740860555575463194741873456346063854",
"284892214128400301707615304140756220795",
"214764128951241853848427377603934929745"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryFlatVectorsScorer.java",
"function": "getRandomVectorScorer"
},
"id": "CVE-2025-25012-8e890f18",
"signature_type": "Function",
"digest": {
"length": 762.0,
"function_hash": "121661573658015586585143774552763814158"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java",
"function": "testMergeTasksRunConcurrently"
},
"id": "CVE-2025-25012-a0969c25",
"signature_type": "Function",
"digest": {
"length": 2241.0,
"function_hash": "76319098723866816594689559756417003794"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java",
"function": "testAbortingOrRunningMergeTaskHoldsUpBudget"
},
"id": "CVE-2025-25012-a6d5d1b4",
"signature_type": "Function",
"digest": {
"length": 2446.0,
"function_hash": "336005509624931702573401538521373357235"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/shard/RefreshListenersTests.java",
"function": "tearDownListeners"
},
"id": "CVE-2025-25012-cf2df322",
"signature_type": "Function",
"digest": {
"length": 130.0,
"function_hash": "328444831314604344727399162438583679216"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryQuantizedVectorsReader.java"
},
"id": "CVE-2025-25012-d291dd28",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"183850627859327718168394210217943252030",
"119440713605327602976381465093838591062",
"290792060009342839573640089321290868726",
"270976080975149282971018854224572759720"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c",
"deprecated": false,
"target": {
"file": "build-conventions/src/main/java/org/elasticsearch/gradle/internal/conventions/PublishPlugin.java",
"function": "configurePublications"
},
"id": "CVE-2025-25012-d3514893",
"signature_type": "Function",
"digest": {
"length": 1603.0,
"function_hash": "189731854327035424288987977333441591101"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java"
},
"id": "CVE-2025-25012-d75b36b7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"171052811983338712720767068862319242266",
"75534510931806616561009228798411602182",
"304964065611473821648246276718015482659",
"253221434997446982234759714123379372613",
"199231931190744519092859481870731152253",
"262490010220133255959245307258240172188",
"242651775738902159684318535157602253259",
"302023268651287123163507389225434437992",
"89007040271568966819115430055017668240",
"111199948869176727959297958215943851068",
"300910113925150042974655506197082755482",
"38680761576604135404550376793945532103",
"309384437170130327359288668676114524093",
"337965267749529621990527345698743654584",
"295354669201802673816105799371090353788",
"6240913983875653436409276525081982108",
"248751098029518690589272253995275021484",
"337965267749529621990527345698743654584",
"339843481698430970160523415532085875061",
"326504718143551483276622338829716283859",
"33828270116544178972584729292075394098",
"337965267749529621990527345698743654584",
"276869826905223374018117787664817929562",
"291411084231821520737302077044424302176",
"232743596474105726316893030610980933160",
"124509583586708512986291630193693494463",
"181886102654718532692349469015666392117"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryFlatVectorsScorer.java"
},
"id": "CVE-2025-25012-e80cff83",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"111224654851700685150749621543526826024",
"12837245827961434506316028730728496128",
"21362702624564743078542507003838834299",
"94899150096491760639140379211073671184"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "x-pack/plugin/ccr/src/test/java/org/elasticsearch/xpack/ccr/repository/CcrRestoreSourceServiceTests.java"
},
"id": "CVE-2025-25012-eee00242",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"93820557296037281159985892991679881146",
"313909914214785293655631769902492945485",
"103647284546623267064228983813795798678",
"330748953943209521905842800613460072747",
"36944862290438741839027727894454653391",
"215590425800491588063180151056185493549",
"25109927725428151538145437548039028659"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/replication/IndexLevelReplicationTests.java"
},
"id": "CVE-2025-25012-f574a36c",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"246359547685120890685405052022310322253",
"218904200522759056229520929271748207164",
"83994906402396635835848990385747622786",
"323983385836557204461337058626144273231"
]
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java",
"function": "testIORateIsAdjustedForAllRunningMergeTasks"
},
"id": "CVE-2025-25012-f61cb128",
"signature_type": "Function",
"digest": {
"length": 2535.0,
"function_hash": "3675615876806173310554248584045380304"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d",
"deprecated": false,
"target": {
"file": "server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java",
"function": "installMockUsableSpaceFS"
},
"id": "CVE-2025-25012-fc15f12a",
"signature_type": "Function",
"digest": {
"length": 1166.0,
"function_hash": "334988941704738743969442303916011677396"
}
},
{
"signature_version": "v1",
"source": "https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c",
"deprecated": false,
"target": {
"file": "server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryQuantizedVectorsReader.java",
"function": "getRandomVectorScorer"
},
"id": "CVE-2025-25012-fde55bc4",
"signature_type": "Function",
"digest": {
"length": 572.0,
"function_hash": "187776846196125659602014629180861178022"
}
}
]
vanir_signatures_modified
"2026-07-15T21:28:14Z"
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25012.json"