CVE-2024-23450
1 advisory.
Maven/org.elasticsearch:elasticsearch CVE-2024-23450: medium 4.9, EPSS 1.25%
Elasticsearch Uncontrolled Resource Consumption vulnerability
Action: Upgrade org.elasticsearch:elasticsearch to 7.17.19 (7.x) or 8.13.0 (8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.17.19 | - |
| 8.0.0 | 8.13.0 | - |
Fixed versions
| 7.17.19 | 8.13.0 |
Sources
- osv: GHSA-w5gg-2q56-6h4f
- https://nvd.nist.gov/vuln/detail/CVE-2024-23450
- https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314
- https://github.com/elastic/elasticsearch
- https://security.netapp.com/advisory/ntap-20240517-0010
- https://www.elastic.co/community/security
CVE-2024-23450 · published · modified · JSON