CVE-2024-23450
MEDIUM4.9EPSS 1.1%Elasticsearch Uncontrolled Resource Consumption vulnerability
Published: 3/27/2024Modified: 2/4/2026
Description
A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.
Affected packages (2)
- Bitnami/elasticsearch>= 7.0.0, < 7.17.19, >= 8.0.0, < 8.13.0
- Maven/org.elasticsearch:elasticsearch>= 7.0.0, < 7.17.19
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM4.9 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
References (6)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-23450
- PATCHhttps://github.com/elastic/elasticsearch
- WEBhttps://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314
- WEBhttps://security.netapp.com/advisory/ntap-20240517-0010
- WEBhttps://security.netapp.com/advisory/ntap-20240517-0010/
- WEBhttps://www.elastic.co/community/security