~ / search / GHSA-285m-vhfq-xx4h

GHSA-285m-vhfq-xx4h

Elasticsearch Improper Handling of Exceptional Conditions

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-46673

Packages

EcosystemPackageAffectedFixed in
Maven org.elasticsearch:elasticsearch >= 7.0.0, < 7.17.14 7.17.14
Maven org.elasticsearch:elasticsearch >= 8.0.0, < 8.10.3 8.10.3

Details

As written in the advisory (Markdown source, shown as plain text).

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

References

External links from the advisory. They lead to third-party sites.