GitHub Advisoryadvisory · Maven

GHSA-285m-vhfq-xx4h Elasticsearch Improper Handling of Exceptional Conditions

MEDIUM Published 2023-11-22 Modified 2023-11-22 Official page ↗
Aliases
CVE-2023-46673
Ecosystem
Maven
Packages
org.elasticsearch:elasticsearch
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-755
Reviewed
2023-11-22

Affected packages

• Maven org.elasticsearch:elasticsearch: >= 7.0.0, < 7.17.14 → fixed in 7.17.14 • Maven org.elasticsearch:elasticsearch: >= 8.0.0, < 8.10.3 → fixed in 8.10.3

Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Related

Alias · CVE (1)

  • CVE-2023-46673 It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when… vulnerability

Weakness · CWE (1)

  • CWE-755 Improper Handling of Exceptional Conditions weakness

References