CVE-2025-27911

published 2025-03-11

CVE-2025-27911: An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit…

Priority P4 31 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
datalust	seq	< 2024.3.13545	2024.3.13545

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-770