Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-285m-vhfq-xx4h

Опубликовано: 22 нояб. 2023
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Elasticsearch Improper Handling of Exceptional Conditions

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

Пакеты

Наименование

org.elasticsearch:elasticsearch

maven
Затронутые версииВерсия исправления

>= 7.0.0, < 7.17.14

7.17.14

Наименование

org.elasticsearch:elasticsearch

maven
Затронутые версииВерсия исправления

>= 8.0.0, < 8.10.3

8.10.3

EPSS

Процентиль: 74%
0.00811
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

CVSS3: 7.5
redhat
около 2 лет назад

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

CVSS3: 6.5
nvd
около 2 лет назад

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.

CVSS3: 6.5
debian
около 2 лет назад

It was identified that malformed scripts used in the script processor ...

EPSS

Процентиль: 74%
0.00811
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-755