CVE Vulnerabilities

CVE-2023-46673

Improper Handling of Exceptional Conditions

Published: Nov 22, 2023 | Modified: Jun 17, 2026
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

NameVendorStart VersionEnd Version
ElasticsearchElastic7.0.0 (including)7.17.14 (excluding)
ElasticsearchElastic8.0.0 (including)8.10.3 (excluding)
ElasticsearchUbuntubionic*
ElasticsearchUbuntuesm-apps/xenial*
ElasticsearchUbuntuxenial*

References