CVE-2023-46673

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Score

CVSS 3.1 7.5 High

Status

Modified - security@elastic.co

Published

2023-11-22

Last modified

2024-08-02

Weaknesses

CWE-755

Affected products

• Elasticsearch (Elastic)

References

• https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
• https://www.elastic.co/community/security