{"action":"Upgrade org.elasticsearch:elasticsearch to 8.13.0 or later.","affected":[{"fixed":"8.13.0","introduced":"8.10.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2024-23451"],"ecosystem":"Maven","epss":0.00492,"exploited":false,"fixed_versions":["8.13.0"],"ghsa_id":"GHSA-r3hx-qfh5-r9m7","id":"tcs_01M5N9ATQPMBBE5WKN7GE2VX9A","modified_at":"2026-08-07T08:12:32.776616835Z","published_at":"2024-03-27T18:32:39Z","references":["https://osv.dev/vulnerability/GHSA-r3hx-qfh5-r9m7","https://nvd.nist.gov/vuln/detail/CVE-2024-23451","https://discuss.elastic.co/t/elasticsearch-8-13-0-security-update-esa-2024-07/356315","https://github.com/elastic/elasticsearch"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-r3hx-qfh5-r9m7","url":"https://osv.dev/vulnerability/GHSA-r3hx-qfh5-r9m7"}],"summary":"Elasticsearch Incorrect Authorization vulnerability"}