CVE-2024-23449
1 advisory.
Maven/org.elasticsearch:elasticsearch CVE-2024-23449: medium 4.3, EPSS 0.68%
Elasticsearch Uncaught Exception leading to crash
Action: Upgrade org.elasticsearch:elasticsearch to 8.11.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.4.0 | 8.11.1 | - |
Fixed versions
| 8.11.1 |
Sources
- osv: GHSA-pw39-f3m5-cxfc
- https://nvd.nist.gov/vuln/detail/CVE-2024-23449
- https://github.com/elastic/elasticsearch/commit/a59180459a3cb30b71399d778943cab4ac2191c4
- https://github.com/elastic/elasticsearch/commit/f9bf18a716613473fc1cb96c838874e1f9f6ba22
- https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458
- https://github.com/elastic/elasticsearch
CVE-2024-23449 · published · modified · JSON