Hello, We are using Elasticsearch 6.3.2 & 6.8.23 Please let us know, whether ES is using spring boot war and whether Elasticsearch is impacted any way by the reported spring shell vulnerability. Please suggest, whether we need to take any steps from our end for mitigating the same

Spring4Shell ::Spring Framework Remote Code Execution Vulnerability

dadoonet (David Pilato) March 31, 2022, 5:24pm 2

ES does not use Spring Boot.

We are using Elasticsearch 6.3.2

You should really upgrade this version.

1 Like

Topic		Replies	Views
Spring4Shell ::Spring Framework Remote Code Execution Vulnerability Elasticsearch	5	408	May 13, 2022
Spring4Shell ::Spring Framework Remote Code Execution Vulnerability Elasticsearch	2	188	May 24, 2022
Are any of Elastic's products affected by CVE-2022-22965? Elastic Security	4	996	May 13, 2022
Spring4Shell ::Spring Framework Remote Code Execution Vulnerability for eck operator Elasticsearch docker	1	220	May 12, 2022
Bitbucket and Elastic security question! Elasticsearch	4	1089	March 11, 2022