elastic/elasticsearch · Security

Elasticsearch Improper Handling of Exceptional Conditions

GHSA ID
GHSA-285m-vhfq-xx4h
CVE ID
CVE-2023-46673
Severity
medium
Published
Updated
CVSS
6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v3
6.5 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

CWEs

References