CVEvulnerability

CVE-2023-46673

7.5 HIGH Published 2023-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-755

Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Affected configurations

• elastic elasticsearch (>= 7.0.0 < 7.17.14) • elastic elasticsearch (>= 8.0.0 < 8.10.3)

Related

Weakness · CWE (1)

  • CWE-755 Improper Handling of Exceptional Conditions weakness

References