GHSA-285m-vhfq-xx4h
Elasticsearch Improper Handling of Exceptional Conditions
At a glance
- Published
- Updated
- CVE
- CVE-2023-46673
- Aliases
- BIT-elasticsearch-2023-46673
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.elasticsearch:elasticsearch | introduced 7.0.0, fixed 7.17.14 |
| Maven · org.elasticsearch:elasticsearch | introduced 8.0.0, fixed 8.10.3 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-46673 ADVISORY
- https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708 WEB
- https://github.com/elastic/elasticsearch PACKAGE
- https://www.elastic.co/community/security WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |