Description
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Remediation
References
https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708
https://www.elastic.co/community/security
Related Vulnerabilities
CVE-2020-27216 Vulnerability in maven package org.mortbay.jetty:jetty
CVE-2022-44730 Vulnerability in maven package org.apache.xmlgraphics:batik-script
CVE-2022-36091 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2016-3726 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2019-1003066 Vulnerability in maven package org.jvnet.hudson.plugins:bugzilla