Elasticsearch Improper Handling of Exceptional Conditions

GHSA-285m-vhfq-xx4h · BIT-elasticsearch-2023-46673 · CVE-2023-46673

Published Nov 22, 2023 · Modified Feb 16, 2024

Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-46673
WEB https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
PACKAGE https://github.com/elastic/elasticsearch
WEB https://www.elastic.co/community/security

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes