En bref
- CVE-2024-23448 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant github.com/elastic/apm-server, apm server (elastic).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.67%, plus élevée que 52.0% des vulnérabilités.
- Correctif : mettre à jour vers 8.12.1 ou plus récent.
Description
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this could lead to the insertion of sensitive or private information in the APM Server logs.
NVD description
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this could lead to the insertion of sensitive or private information in the APM Server logs.
Autres vulnérabilités de github.com/elastic/apm-server
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free