Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2023-46673

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

VectorNETWORK

PublishedNov 22, 2023, 10:15

Published Bysecurity@elastic.co

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.elasticsearch:elasticsearch(Maven)7.0.07.17.14N/A

org.elasticsearch:elasticsearch(Maven)8.0.08.10.3N/A

References

https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
https://www.elastic.co/community/security

Weakness Type

CWE-755

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK