Detections
Analytics
CVE-2015-4152
high
Description
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.
References
https://www.elastic.co/community/security/
https://www.elastic.co/blog/logstash-1-4-3-released
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-4176
http://www.securityfocus.com/archive/1/535725/100/0/threaded
http://packetstormsecurity.com/files/132233/Logstash-1.4.2-Directory-Traversal.html