GHSA-wh6w-69xc-5rq5HighCVSS 7.5

Improper Check for Unusual or Exceptional Conditions in Elasticsearch

Published
June 7, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-23712 →

📋 Description

A Denial of Service flaw was discovered in Elasticsearch 8.0.0 through 8.2.0. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request. Version 8.2.1 contains a patch.

🎯 Affected products1

  • maven/org.elasticsearch:elasticsearch:>= 8.0.0, < 8.2.1

🔗 References (5)