GHSA-285m-vhfq-xx4h
Elasticsearch Improper Handling of Exceptional Conditions
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2023-46673
- Alias
- BIT-elasticsearch-2023-46673
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Paquets affectés
| Paquet | Versions |
|---|---|
| Maven · org.elasticsearch:elasticsearch | introduced 7.0.0, fixed 7.17.14 |
| Maven · org.elasticsearch:elasticsearch | introduced 8.0.0, fixed 8.10.3 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2023-46673 ADVISORY
- https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708 WEB
- https://github.com/elastic/elasticsearch PACKAGE
- https://www.elastic.co/community/security WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |