VULNERABILITY INTELLIGENCE
CVE-2023-46673
CVSS score6.5 MEDIUM
EPSS probability0.84%
CISA KEVNot currently listed
Published2023-11-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Weakness classification
- CWE-755: Improper Handling of Exceptional Conditions
Primary references
- security@elastic.co — Vendor Advisory
- security@elastic.co — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory