{"action":"Upgrade org.elasticsearch:elasticsearch to 8.11.1 or later.","affected":[{"fixed":"8.11.1","introduced":"8.4.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2024-23449"],"ecosystem":"Maven","epss":0.00681,"exploited":false,"fixed_versions":["8.11.1"],"ghsa_id":"GHSA-pw39-f3m5-cxfc","id":"tcs_01M5N98434QV113CG2VDSJQ3KA","modified_at":"2025-05-27T18:21:51.889589Z","published_at":"2024-03-29T12:30:42Z","references":["https://osv.dev/vulnerability/GHSA-pw39-f3m5-cxfc","https://nvd.nist.gov/vuln/detail/CVE-2024-23449","https://github.com/elastic/elasticsearch/commit/a59180459a3cb30b71399d778943cab4ac2191c4","https://github.com/elastic/elasticsearch/commit/f9bf18a716613473fc1cb96c838874e1f9f6ba22","https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458","https://github.com/elastic/elasticsearch"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-pw39-f3m5-cxfc","url":"https://osv.dev/vulnerability/GHSA-pw39-f3m5-cxfc"}],"summary":"Elasticsearch Uncaught Exception leading to crash"}