Elastic security advisories (no mention of exploitation):
- ESA-2024-06 Elasticsearch 8.13.0 / 7.17.19 Security Update: CVE-2024-23450 (4.9 medium) Elasticsearch Uncontrolled Resource Consumption vulnerability (Denial of Service?)
- ESA-2024-07 Elasticsearch 8.13.0 Security Update: CVE-2024-23451 (4.4 medium) Elasticsearch Improper Authorization in the Remote Cluster Security API key based security model (arbitrary file read)
#Elastic #PatchTuesday #vulnerability #CVE_2024_23450 #CVE_2024_23451 #securityadvisory