CVE-2014-4326
1 advisory.
RubyGems/logstash CVE-2014-4326: high
Elasticsearch Logstash allows remote attackers to execute arbitrary commands
Action: Upgrade logstash to 1.4.2 or later.
bundle update logstashAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.14 | 1.4.2 | - |
Fixed versions
| 1.4.2 |
Sources
- osv: GHSA-8qhq-rq4j-8prj
- https://nvd.nist.gov/vuln/detail/CVE-2014-4326
- https://github.com/elastic/logstash
- https://web.archive.org/web/20140804031140/http://www.elasticsearch.org/blog/logstash-1-4-2
- https://web.archive.org/web/20201207013408/http://www.securityfocus.com/archive/1/532841/100/0/threaded
- https://www.elastic.co/community/security
CVE-2014-4326 · published · modified · JSON