CVE-2015-4152
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- elastic:logstash
References
- http://packetstormsecurity.com/files/132233/Logstash-1.4.2-Directory-Traversal.html
- http://www.securityfocus.com/archive/1/535725/100/0/threaded
- https://www.elastic.co/blog/logstash-1-4-3-released
- https://www.elastic.co/community/security/
- http://packetstormsecurity.com/files/132233/Logstash-1.4.2-Directory-Traversal.html