Maven/org.elasticsearch:elasticsearch CVE-2018-17247: medium 5.9, EPSS 1.38%
Improper Restriction of XML External Entity Reference in Elasticsearch
Action: Upgrade org.elasticsearch:elasticsearch to 6.5.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.5.0 | 6.5.2 | - |
Fixed versions
| 6.5.2 |
Sources
- osv: GHSA-ccmr-qj26-845g
- https://nvd.nist.gov/vuln/detail/CVE-2018-17247
- https://discuss.elastic.co/t/elastic-stack-6-5-2-security-update/159594
- https://www.elastic.co/community/security
- http://www.securityfocus.com/bid/106294
CVE-2018-17247 · published · modified · JSON