Vulnerabilities (CVE)

Filtered by vendor Elastic Subscribe
Filtered by product Logstash
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-4326 1 Elastic 1 Logstash 2019-06-17 7.5 HIGH N/A
Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.
CVE-2015-4152 1 Elastic 1 Logstash 2019-06-17 6.4 MEDIUM N/A
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.