CVE-2023-46673
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Elastic | Elasticsearch | 7.0.0 < 7.17.14 | affected |
| Elastic | Elasticsearch | 8.0.0 < 8.10.3 | affected |
Weaknesses
- CWE-755: CWE-755 Improper Handling of Exceptional Conditions
ADP Enrichment
CVE Program Container
Additional References
- https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
- https://www.elastic.co/community/security
References
- https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
- https://www.elastic.co/community/security
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.