Skip to main content

Improper Handling of Exceptional Conditions

CVE-2023-46673

High
7.5/10

Summary

A flaw was discovered in Elasticsearch in versions 7.0.x prior to 7.17.14, and 8.0.x prior to 8.10.3. It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-755 - Improper Handling of Exceptional Conditions

The software does not handle or incorrectly handles an exceptional condition.

References

Advisory Timeline

  • Published