~ / search / GHSA-w5gg-2q56-6h4f

GHSA-w5gg-2q56-6h4f

Elasticsearch Uncontrolled Resource Consumption vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-23450

Packages

EcosystemPackageAffectedFixed in
Maven org.elasticsearch:elasticsearch >= 7.0.0, < 7.17.19 7.17.19
Maven org.elasticsearch:elasticsearch >= 8.0.0, < 8.13.0 8.13.0

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

References

External links from the advisory. They lead to third-party sites.