Description (CNA)
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / Elasticsearch | affected 7.0.0 before 7.17.14; affected 8.0.0 before 8.10.3 |
CWE
CWE-755
References
- https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
- https://www.elastic.co/community/security
ADP enrichment
No English description supplied.