CVE-2023-46673

State: Published
Severity: 6.5 Medium
Published: Nov 22, 2023
Updated: Aug 2, 2024
Reserved: Oct 24, 2023

Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	elastic

Weaknesses

CWE-755 Improper Handling of Exceptional Conditions

Affected Products

Product	Versions
ElasticsearchElastic	7.0.0 to before 7.17.14Affected 8.0.0 to before 8.10.3Affected

References

https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
https://www.elastic.co/community/security

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.