CVE-2015-4152

概要

参考情報

• packetstormsecurity.com/files/132233/Logstash-1.4.2-Directory-Traversal.html
• securityfocus.com/archive/1/535725/100/0/threaded
• elastic.co/blog/logstash-1-4-3-released · Vendor Advisory
• elastic.co/community/security · Vendor Advisory

logstash のその他の脆弱性

• CVE-2026-33466緊急 9.8Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote cod…
• CVE-2023-46672中 5.5An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisit…
• CVE-2021-22138低 3.7In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature. When sp…
• CVE-2019-7620高 7.5Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is…
• CVE-2019-7612緊急 9.8A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is s…