{"action":"Upgrade org.elasticsearch:elasticsearch to 7.17.1 or later.","affected":[{"fixed":"7.17.1","introduced":"7.16.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2022-23708"],"ecosystem":"Maven","epss":0.01035,"exploited":false,"fixed_versions":["7.17.1"],"ghsa_id":"GHSA-pgq6-ccqj-hpqr","id":"tcs_01M5N97DQJ9EGQ6MJWD36THPBF","modified_at":"2024-02-20T05:24:42.092875Z","published_at":"2022-03-04T00:00:15Z","references":["https://osv.dev/vulnerability/GHSA-pgq6-ccqj-hpqr","https://nvd.nist.gov/vuln/detail/CVE-2022-23708","https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447","https://security.netapp.com/advisory/ntap-20220729-0003"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-pgq6-ccqj-hpqr","url":"https://osv.dev/vulnerability/GHSA-pgq6-ccqj-hpqr"}],"summary":"Elasticsearch privilege escalation"}