CVE-2024-23449
Elasticsearch Uncaught Exception
Résumé
Elasticsearch Uncaught Exception
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
elasticsearch
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.11.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co