{"id":"CVE-2025-25012","summary":"Kibana Open Redirect","details":"URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.","aliases":["BIT-elk-2025-25012","BIT-kibana-2025-25012"],"modified":"2026-07-15T21:28:14.103194Z","published":"2025-06-25T11:52:53.699Z","related":["CGA-3q82-r97f-h4r2"],"database_specific":{"cna_assigner":"elastic","cwe_ids":["CWE-601"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25012.json"},"references":[{"type":"WEB","url":"https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-10/379444"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25012.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25012"},{"type":"PACKAGE","url":"https://github.com/elastic/kibana"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/elastic/elasticsearch","events":[{"introduced":"b7e28a7232616c7a21bc879a535d801b8553ba77"},{"fixed":"580aff1a0064ce4c93293aaab6fcc55e22c10d1c"},{"introduced":"1b6a7ece17463df5ff54a3e1302d825889aa1161"},{"fixed":"03c9f64f104b1d5272d2ff2a8d8937441edd1cac"},{"introduced":"04e979aa50b657bebd4a0937389308de82c2bdad"},{"fixed":"28fc77664903e7de48ba5632e5d8bfeb5e3ed39c"},{"introduced":"112859b85d50de2a7e63f73c8fc70b99eea24291"},{"fixed":"cc7302afc8499e83262ba2ceaa96451681f0609d"}],"database_specific":{"cpe":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.0.0"},{"fixed":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.17.8"},{"introduced":"8.18.0"},{"fixed":"8.18.3"},{"introduced":"9.0.0"},{"fixed":"9.0.3"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/elastic/kibana","events":[{"introduced":"ee89fda8a17eff9c93f7400c102edf76cb4d7d8a"},{"fixed":"f6e2f2e44cc0a6a11435f1b6350f735e23bef4b4"},{"introduced":"57ca5e139a33dd2eed927ce98d8231a1f217cd15"},{"fixed":"9ac86ca77adb4dc5793e20f76695563f0be31f0a"},{"introduced":"c220d2938cd718bb332afb07baaf95999eb28759"},{"fixed":"70e0ee45ae6f2e5cd35b7af4822d86ffa877ad9c"},{"introduced":"504d6bfa94cca17fabb76e06152c30c4f0c3efdd"},{"fixed":"3b8379b249b9b5ab0c3c2ee245cd7d62ad93ab4d"}],"database_specific":{"cpe":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.0.0"},{"fixed":"7.17.29"},{"introduced":"8.0.0"},{"fixed":"8.17.8"},{"introduced":"8.18.0"},{"fixed":"8.18.3"},{"introduced":"9.0.0"},{"fixed":"9.0.3"}],"source":"CPE_RANGE"}}],"versions":["v9.0.2","v8.18.2","v8.18.1","v9.0.1","v8.18.0","v9.0.0"],"database_specific":{"vanir_signatures":[{"target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryQuantizedVectorsReader.java","function":"getRandomVectorScorer"},"deprecated":false,"digest":{"length":525,"function_hash":"138500781664115051745568329746266332244"},"id":"CVE-2025-25012-0daa79a5","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c"},{"source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java","function":"testMergeTasksAreUnblockedWhenMoreDiskSpaceBecomesAvailable"},"deprecated":false,"digest":{"function_hash":"114340430715461535395453156931583844905","length":4601},"id":"CVE-2025-25012-203607c4","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["325346763520944012913154789921944685178","61552211637263319266280212069306163976","238965232618491914774102510476003231761","91842554885795545908575250797740073380","41186032155842938062122952139992001177","26650412168015143841783692789907731833","156855889974115839096909303362391651478","5255688417597662836316466950746456815","267688007740415870942430918212022655160","123593297690308739122442988051348431664","207083930239604338592887667635525018029","285979066839997041627241454323751656105","89817169799828182270847485303899076995","259726165486981002704425065102702119655","228443004802496231376269442754123243387","110553570186771583072883260970124481256","159259824297904330471361141933251778658","15965688380580672478116053669808152101","33955976224007740005314928988632842514","189421514390395652693360186541539881292","235537949590647007651887994723552170873","160154105448877168464243405801723143273"],"threshold":0.9},"id":"CVE-2025-25012-27c0ea2c","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c","target":{"file":"build-tools/src/main/java/org/elasticsearch/gradle/plugin/PluginBuildPlugin.java"}},{"deprecated":false,"digest":{"function_hash":"316492153615631109933469148045973651998","length":4960},"id":"CVE-2025-25012-2ab47e3e","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/action/support/replication/TransportReplicationAllPermitsAcquisitionTests.java","function":"testTransportReplicationActionWithAllPermits"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java","function":"testEnqueuedAndBackloggedMergesAreStillExecutedWhenThreadPoolIsShutdown"},"deprecated":false,"digest":{"function_hash":"58245096897601243573986666997638366710","length":3346},"id":"CVE-2025-25012-2b326a54"},{"target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java","function":"testTargetIORateChangesWhenSubmittingMergeTasks"},"deprecated":false,"digest":{"function_hash":"277372784463831650673181036537326562713","length":2358},"id":"CVE-2025-25012-2ff60d13","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java"},"deprecated":false,"digest":{"line_hashes":["307691308776613465939274719738766445510","289330628909240392634313024219462074471","215459541240381812089653801057234809951","195601705674340086576045960890022459903","63567567690210632948332546359113978043","314267534669116641632784081485548282938","62345402823509629603668591916344770904","84630478335641272663136997410200042138","63567567690210632948332546359113978043","314267534669116641632784081485548282938","316366976826873294442033849823430927226","170080810076840276635196887307379880191","282313366995788747323617726626351808497","314267534669116641632784081485548282938","326551910102055103260865436297764321621","40512608325414184918675501537491319060","43941708160349525473059269169092050580","225248846417230559201373759739093348990","252031580928537639581915915556426392837","117156754148631786935824217294441628634","183457692449573878653557319674525850268","225248846417230559201373759739093348990","5832801963475927524882496922041584898","320510010116594963399405726212220688679"],"threshold":0.9},"id":"CVE-2025-25012-374f15ac"},{"id":"CVE-2025-25012-3a548667","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java","function":"testAvailableDiskSpaceMonitorSettingsUpdate"},"deprecated":false,"digest":{"function_hash":"218795969899732352235877274137524817264","length":3459}},{"digest":{"length":3806,"function_hash":"24314280653182670704448609019036719364"},"id":"CVE-2025-25012-4b317b56","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java","function":"testUnavailableBudgetBlocksNewMergeTasksFromStartingExecution"},"deprecated":false},{"target":{"file":"server/src/test/java/org/elasticsearch/index/shard/RefreshListenersTests.java"},"deprecated":false,"digest":{"line_hashes":["200769306572901182738284701263119023916","197041028791178570388294868437166239354","175312629887710913869782170769833841949","71917613768352789768530191998911901158"],"threshold":0.9},"id":"CVE-2025-25012-4effdae8","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d"},{"id":"CVE-2025-25012-53cfa8b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c","target":{"file":"build-tools/src/main/java/org/elasticsearch/gradle/plugin/PluginBuildPlugin.java","function":"configurePublishing"},"deprecated":false,"digest":{"function_hash":"217069498392094122099161240975043925563","length":872}},{"id":"CVE-2025-25012-5bc55e8f","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/main/java/org/elasticsearch/index/engine/ElasticsearchConcurrentMergeScheduler.java"},"deprecated":false,"digest":{"line_hashes":["48097110980652127930355540195489084594","81805432323412997011181710135590440377","171782271863759147025299528472839169997"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryQuantizedVectorsReader.java"},"deprecated":false,"digest":{"line_hashes":["183850627859327718168394210217943252030","119440713605327602976381465093838591062","290792060009342839573640089321290868726","270976080975149282971018854224572759720"],"threshold":0.9},"id":"CVE-2025-25012-6288d7d5"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java","function":"testBackloggedMergeTasksExecuteExactlyOnce"},"deprecated":false,"digest":{"function_hash":"251155605364346625738409169836128342675","length":2058},"id":"CVE-2025-25012-668e6a1c"},{"deprecated":false,"digest":{"length":1983,"function_hash":"229700642717570257835356427519595463377"},"id":"CVE-2025-25012-6fb4e088","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java","function":"testThreadPoolStatsWithBackloggedMergeTasks"}},{"deprecated":false,"digest":{"line_hashes":["270464534409354986261763716525045464983","227207832886699725163045304921806508418","82592531520277924985580254628226686204","116285117003426191198584459082216742860","63126585333495968821346326973767482129","281915879393945016910658230161970023819","158179363007626669286354249716512138616","255192158583294586491439740642803969954"],"threshold":0.9},"id":"CVE-2025-25012-7365feaf","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c","target":{"file":"build-conventions/src/main/java/org/elasticsearch/gradle/internal/conventions/PublishPlugin.java"}},{"signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"function":"getRandomVectorScorer","file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryFlatVectorsScorer.java"},"deprecated":false,"digest":{"function_hash":"246389076578088141726765604445735553642","length":703},"id":"CVE-2025-25012-79c748f3","signature_type":"Function"},{"target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java","function":"testBackloggedMergeTasksDoNotHoldUpBudget"},"deprecated":false,"digest":{"length":4015,"function_hash":"208757528726588159332625699170358379991"},"id":"CVE-2025-25012-7a47ff20","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d"},{"digest":{"line_hashes":["111224654851700685150749621543526826024","54683282904885283459823976506809506697","334831851779868906931383438391473488459","298409900482534359175246209039761711352"],"threshold":0.9},"id":"CVE-2025-25012-7a61862c","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryFlatVectorsScorer.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["321898834984636408459994041876775684978","54469443586630274578992100240906916611","161102368737906265041493293778631132536","167555618741137417416616345551408800379","17086379705161662859808635588599426085","49478537944292540195752568243242909031","8497397533526139794711497608530584719","97983651176895854092372582947426511495","262175765616900540679876344022161215001","6432720316142191080545473669787022077","236597937580226699090360365870000212126","153395696997859798495959299562487030223","125268921903633756733297704068371718232","98805655321375081409252598279695212410","323868577050463108012912504659974416425","211193098417061433479009651036717606288","49944783418633659813184537346346790721","11100206399938346665215749161424971610","139815414802687107609303091718747250968","263740860555575463194741873456346063854","284892214128400301707615304140756220795","214764128951241853848427377603934929745"],"threshold":0.9},"id":"CVE-2025-25012-821c4c5b","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/test/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryQuantizedVectorsFormatTests.java"}},{"id":"CVE-2025-25012-82ccd7de","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/main/java/org/elasticsearch/index/engine/ThreadPoolMergeScheduler.java"},"deprecated":false,"digest":{"line_hashes":["213183768922419533013202803947277341310","277217446968631274613561542943234574513","215064158321182856550655269006048219996","65546216993739219098055840369500337784","202372387126590055595216950319796075929","280754281191561536932138165543058822551","291327381337858814575392363199778376893","325517111645249999307143771805879967976"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["68803058418137026878114166105668880209","108587633537507210242609878158511307392","38433856949351724459033651305753252885","112754644778537773866754798965204519700"],"threshold":0.9},"id":"CVE-2025-25012-85b6dd4c","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/action/support/replication/TransportReplicationAllPermitsAcquisitionTests.java"}},{"id":"CVE-2025-25012-88fcd718","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/replication/IndexLevelReplicationTests.java","function":"testLateDeliveryAfterGCTriggeredOnReplica"},"deprecated":false,"digest":{"function_hash":"75475225616193343904521083743406012413","length":1129}},{"target":{"file":"server/src/test/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryQuantizedVectorsFormatTests.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321898834984636408459994041876775684978","54469443586630274578992100240906916611","161102368737906265041493293778631132536","167555618741137417416616345551408800379","17086379705161662859808635588599426085","49478537944292540195752568243242909031","8497397533526139794711497608530584719","97983651176895854092372582947426511495","262175765616900540679876344022161215001","6432720316142191080545473669787022077","236597937580226699090360365870000212126","153395696997859798495959299562487030223","125268921903633756733297704068371718232","98805655321375081409252598279695212410","323868577050463108012912504659974416425","211193098417061433479009651036717606288","49944783418633659813184537346346790721","11100206399938346665215749161424971610","139815414802687107609303091718747250968","263740860555575463194741873456346063854","284892214128400301707615304140756220795","214764128951241853848427377603934929745"]},"id":"CVE-2025-25012-8c2a7093","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c"},{"source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryFlatVectorsScorer.java","function":"getRandomVectorScorer"},"deprecated":false,"digest":{"length":762,"function_hash":"121661573658015586585143774552763814158"},"id":"CVE-2025-25012-8e890f18","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"function":"testMergeTasksRunConcurrently","file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java"},"deprecated":false,"digest":{"length":2241,"function_hash":"76319098723866816594689559756417003794"},"id":"CVE-2025-25012-a0969c25","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java","function":"testAbortingOrRunningMergeTaskHoldsUpBudget"},"deprecated":false,"digest":{"function_hash":"336005509624931702573401538521373357235","length":2446},"id":"CVE-2025-25012-a6d5d1b4","signature_type":"Function"},{"target":{"file":"server/src/test/java/org/elasticsearch/index/shard/RefreshListenersTests.java","function":"tearDownListeners"},"deprecated":false,"digest":{"function_hash":"328444831314604344727399162438583679216","length":130},"id":"CVE-2025-25012-cf2df322","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryQuantizedVectorsReader.java"},"deprecated":false,"digest":{"line_hashes":["183850627859327718168394210217943252030","119440713605327602976381465093838591062","290792060009342839573640089321290868726","270976080975149282971018854224572759720"],"threshold":0.9},"id":"CVE-2025-25012-d291dd28"},{"signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/580aff1a0064ce4c93293aaab6fcc55e22c10d1c","target":{"file":"build-conventions/src/main/java/org/elasticsearch/gradle/internal/conventions/PublishPlugin.java","function":"configurePublications"},"deprecated":false,"digest":{"function_hash":"189731854327035424288987977333441591101","length":1603},"id":"CVE-2025-25012-d3514893","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["171052811983338712720767068862319242266","75534510931806616561009228798411602182","304964065611473821648246276718015482659","253221434997446982234759714123379372613","199231931190744519092859481870731152253","262490010220133255959245307258240172188","242651775738902159684318535157602253259","302023268651287123163507389225434437992","89007040271568966819115430055017668240","111199948869176727959297958215943851068","300910113925150042974655506197082755482","38680761576604135404550376793945532103","309384437170130327359288668676114524093","337965267749529621990527345698743654584","295354669201802673816105799371090353788","6240913983875653436409276525081982108","248751098029518690589272253995275021484","337965267749529621990527345698743654584","339843481698430970160523415532085875061","326504718143551483276622338829716283859","33828270116544178972584729292075394098","337965267749529621990527345698743654584","276869826905223374018117787664817929562","291411084231821520737302077044424302176","232743596474105726316893030610980933160","124509583586708512986291630193693494463","181886102654718532692349469015666392117"],"threshold":0.9},"id":"CVE-2025-25012-d75b36b7","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java"}},{"digest":{"line_hashes":["111224654851700685150749621543526826024","12837245827961434506316028730728496128","21362702624564743078542507003838834299","94899150096491760639140379211073671184"],"threshold":0.9},"id":"CVE-2025-25012-e80cff83","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es818/ES818BinaryFlatVectorsScorer.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"x-pack/plugin/ccr/src/test/java/org/elasticsearch/xpack/ccr/repository/CcrRestoreSourceServiceTests.java"},"deprecated":false,"digest":{"line_hashes":["93820557296037281159985892991679881146","313909914214785293655631769902492945485","103647284546623267064228983813795798678","330748953943209521905842800613460072747","36944862290438741839027727894454653391","215590425800491588063180151056185493549","25109927725428151538145437548039028659"],"threshold":0.9},"id":"CVE-2025-25012-eee00242"},{"id":"CVE-2025-25012-f574a36c","signature_type":"Line","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/replication/IndexLevelReplicationTests.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["246359547685120890685405052022310322253","218904200522759056229520929271748207164","83994906402396635835848990385747622786","323983385836557204461337058626144273231"]}},{"deprecated":false,"digest":{"function_hash":"3675615876806173310554248584045380304","length":2535},"id":"CVE-2025-25012-f61cb128","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d","target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceTests.java","function":"testIORateIsAdjustedForAllRunningMergeTasks"}},{"target":{"file":"server/src/test/java/org/elasticsearch/index/engine/ThreadPoolMergeExecutorServiceDiskSpaceTests.java","function":"installMockUsableSpaceFS"},"deprecated":false,"digest":{"function_hash":"334988941704738743969442303916011677396","length":1166},"id":"CVE-2025-25012-fc15f12a","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/cc7302afc8499e83262ba2ceaa96451681f0609d"},{"digest":{"function_hash":"187776846196125659602014629180861178022","length":572},"id":"CVE-2025-25012-fde55bc4","signature_type":"Function","signature_version":"v1","source":"https://github.com/elastic/elasticsearch/commit/28fc77664903e7de48ba5632e5d8bfeb5e3ed39c","target":{"file":"server/src/main/java/org/elasticsearch/index/codec/vectors/es816/ES816BinaryQuantizedVectorsReader.java","function":"getRandomVectorScorer"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25012.json","vanir_signatures_modified":"2026-07-15T21:28:14Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}]}