Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2023-46673 — MEDIUM severity vulnerability | Release Alert

CVE-2023-46673

6.5

MEDIUMCVSS v3

Published

November 22, 2023

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

>= 8.0.0, < 8.10.3, >= 7.0.0, < 7.17.14NVD

elasticsearch

NPMThe official low-level Elasticsearch client for Node.js and the browser.

>= 8.0.0, < 8.10.3, >= 7.0.0, < 7.17.14NVD

ElasticSearch

More on this CVE

NVD↗GitHub Advisory↗

NuGet Gallery

Elasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

>= 8.0.0, < 8.10.3, >= 7.0.0, < 7.17.14NVD

Elasticsearch

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

>= 8.0.0, < 8.10.3, >= 7.0.0, < 7.17.14NVD