CVE-2023-31419: Elastic Elasticsearch

High severity, CVSS 7.5. EPSS: 61.7% chance of exploitation in the next 30 days.

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

Affected products

• Elastic Elasticsearch: from 7.0.0, up to and including 7.17.12; from 8.0.0, up to and including 8.9.0

Published 2023-10-26. Last modified 2026-06-17.