Maven/org.elasticsearch:elasticsearch CVE-2022-23708: medium 4.3, EPSS 1.03%
Elasticsearch privilege escalation
Action: Upgrade org.elasticsearch:elasticsearch to 7.17.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.16.0 | 7.17.1 | - |
Fixed versions
| 7.17.1 |
Sources
- osv: GHSA-pgq6-ccqj-hpqr
- https://nvd.nist.gov/vuln/detail/CVE-2022-23708
- https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447
- https://security.netapp.com/advisory/ntap-20220729-0003
CVE-2022-23708 · published · modified · JSON