CVE-2025-27911
Medium
Description
An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.
SeverityMedium
CVSS6.5
Exploit probability38. percentile0.4%
ProductDatalust Seq
PublishedMar 11, 2025
First seenMar 11, 2025
Weakness typeCWE-770Allocation of resources without limits
How to fix
Update
- datalust seq2024.3.13545 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datalust seq | v < 2024.3.13545 | 2024.3.13545 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.