GitHub Advisoryadvisory · Maven

GHSA-w5gg-2q56-6h4f Elasticsearch Uncontrolled Resource Consumption vulnerability

MEDIUM Published 2024-03-27 Modified 2024-06-10 Official page ↗
Aliases
CVE-2024-23450
Ecosystem
Maven
Packages
org.elasticsearch:elasticsearch
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2024-03-27

Affected packages

• Maven org.elasticsearch:elasticsearch: >= 7.0.0, < 7.17.19 → fixed in 7.17.19 • Maven org.elasticsearch:elasticsearch: >= 8.0.0, < 8.13.0 → fixed in 8.13.0

Description

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

Related

Alias · CVE (1)

  • CVE-2024-23450 A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References