CVE Vulnerabilities

CVE-2023-46673

Improper Handling of Exceptional Conditions

Published: Nov 22, 2023 | Modified: Nov 30, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name Vendor Start Version End Version
Elasticsearch Elastic 7.0.0 (including) 7.17.14 (excluding)
Elasticsearch Elastic 8.0.0 (including) 8.10.3 (excluding)

References