| CVE-2026-33466 |
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
|
8.1
Élevée
|
8 avr. 2026 |
| CVE-2025-37730 |
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
|
6.5
Moyenne
|
6 mai 2025 |
| CVE-2023-46672 |
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
|
8.4
Élevée
|
15 nov. 2023 |
| CVE-2019-7620 |
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
|
Non notée
|
30 oct. 2019 |
| CVE-2019-7613 |
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw
|
Non notée
|
25 mars 2019 |
| CVE-2019-7612 |
A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs
|
Non notée
|
25 mars 2019 |
| CVE-2018-3817 |
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently…
|
Non notée
|
30 mars 2018 |
| CVE-2016-10363 |
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow…
|
Non notée
|
16 juin 2017 |
| CVE-2016-10362 |
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file…
|
Non notée
|
16 juin 2017 |