CVE-2024-23450: Elasticsearch Uncontrolled Resource Consumption vulnerability

March 27, 2024

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

References

discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314
github.com/advisories/GHSA-w5gg-2q56-6h4f
github.com/elastic/elasticsearch
nvd.nist.gov/vuln/detail/CVE-2024-23450
www.elastic.co/community/security

Code Behaviors & Features

Detect and mitigate CVE-2024-23450 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →