# Elasticsearch 8.13.0 / 7.17.19 Security Update (ESA-2024-06)

**URL:** https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314
**Category:** Security Announcements
**Created:** [March 27, 2024, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 "2024-03-27T16:53:36Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![rodrigo\_silva](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rodrigo_silva/32/120546_2.png) [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)
#### Post date: [March 27, 2024, 4:53pm UTC](https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314/1 "2024-03-27T16:53:36Z")

</div>

**Elasticsearch Uncontrolled Resource Consumption vulnerability (ESA-2024-06)**

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash.

**Affected Versions:**  
Elasticsearch versions on or after 7.0.0 and before 7.17.19  
Elasticsearch versions on or after 8.0.0 and before 8.13.0

**Solutions and Mitigations:**  
The issue is resolved in versions 8.13.0 and 7.17.19.

**Severity** : CVSSv3: 4.9(Medium) [CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H](https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)

**CVE ID** : CVE-2024-23450