cve.bz

CVE-2024-23450

7.5 highEPSS 1.3%

High (7.5) in elastic elasticsearch. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in org.elasticsearch:elasticsearch 7.17.19, 8.13.0.

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE
CWE-400
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-w5gg-2q56-6h4fMavenorg.elasticsearch:elasticsearch>=7.0.0 <7.17.197.17.19
GHSA-w5gg-2q56-6h4fMavenorg.elasticsearch:elasticsearch>=8.0.0 <8.13.08.13.0

References

Check your stackJSON