Description
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Remediation
References
https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
https://www.elastic.co/community/security
Related Vulnerabilities
CVE-2018-1273 Vulnerability in maven package org.springframework.data:spring-data-commons
CVE-2022-33980 Vulnerability in maven package org.apache.commons:commons-configuration2
CVE-2020-5410 Vulnerability in maven package org.springframework.cloud:spring-cloud-config-server
CVE-2022-42467 Vulnerability in maven package org.apache.isis.core:isis-core-config
CVE-2016-3674 Vulnerability in maven package com.thoughtworks.xstream:xstream