Repository: hazelcast/hazelcast (language: java)

Issue:
Vulnerability in elasticsearch-7.17.8 [HZ-3522]
CVE-2023-31418 - currently not available (yet?) in [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-31418) but found and fixed by Elasticsearch:
https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616

```
Referenced In Projects/Scopes:
hazelcast-distribution:compile
hazelcast-jet-elasticsearch-7:compile
```
Affects:  5.3.z/5.2.z/5.1.z

From: OSSINDEX
https://ossindex.sonatype.org/vulnerability/CVE-2023-31418?component-type=maven&component-name=org.elasticsearch%2Felasticsearch&utm_source=dependency-check&utm_medium=integration&utm_content=8.3.1

Vulnerability in elasticsearch-7.17.8 [HZ-3522]
CVE-2023-31418 - currently not available (yet?) in [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-31418) but found and fixed by Elasticsearch:
https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616

```
Referenced In Projects/Scopes:
hazelcast-distribution:compile
hazelcast-jet-elasticsearch-7:compile
```
Affects:  5.3.z/5.2.z/5.1.z

From: OSSINDEX
https://ossindex.sonatype.org/vulnerability/CVE-2023-31418?component-type=maven&component-name=org.elasticsearch%2Felasticsearch&utm_source=dependency-check&utm_medium=integration&utm_content=8.3.1



Discussion / hints:
Fix available in 7.17.13. Will send a PR.

According to the description we are not affected by this vulnerability - we only use Elasticsearch as a client.
Fix available in 7.17.13. Will send a PR.

According to the description we are not affected by this vulnerability - we only use Elasticsearch as a client.

Fix patch:
diff --git a/extensions/elasticsearch/elasticsearch-7/pom.xml b/extensions/elasticsearch/elasticsearch-7/pom.xml
index a51f738159cd3..c327412eb6a48 100644
--- a/extensions/elasticsearch/elasticsearch-7/pom.xml
+++ b/extensions/elasticsearch/elasticsearch-7/pom.xml
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>org.elasticsearch.client</groupId>
             <artifactId>elasticsearch-rest-high-level-client</artifactId>
-            <version>7.17.8</version>
+            <version>7.17.13</version>
         </dependency>
 
         <!-- TEST -->


Test patch: