CVE Vulnerabilities

CVE-2023-46673

Improper Handling of Exceptional Conditions

Published: Nov 22, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

NameVendorStart VersionEnd Version
ElasticsearchElastic7.0.0 (including)7.17.14 (excluding)
ElasticsearchElastic8.0.0 (including)8.10.3 (excluding)
ElasticsearchUbuntubionic*
ElasticsearchUbuntutrusty*
ElasticsearchUbuntuxenial*

References