Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Remediation

References

https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708

https://www.elastic.co/community/security

Related Vulnerabilities

CVE-2020-8823 Vulnerability in npm package sockjs

CVE-2023-30843 Vulnerability in npm package payload

CVE-2023-31125 Vulnerability in npm package engine.io

CVE-2020-9281 Vulnerability in npm package ckeditor4-dev

CVE-2012-0818 Vulnerability in maven package org.jboss.resteasy:resteasy-jaxrs

Severity

High

Classification

CWE-755 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Vendor Advisory