CVE-2024-23448

Go/github.com/elastic/apm-server CVE-2024-23448: medium 5.7

APM Server vulnerable to Insertion of Sensitive Information into Log File

Action: Upgrade github.com/elastic/apm-server to 8.12.1 or later.

go get github.com/elastic/apm-server@v8.12.1

Affected

Fixed versions

Sources

• osv: GHSA-8r33-q5j5-rh7g
• https://nvd.nist.gov/vuln/detail/CVE-2024-23448
• https://discuss.elastic.co/t/apm-server-8-12-1-security-update-esa-2024-03/352688
• https://github.com/elastic/apm-server
• https://www.elastic.co/community/security

CVE-2024-23448 · published 2024-02-08T00:32:19Z · modified 2026-08-07T08:12:13.362040435Z · JSON

Go/github.com/elastic/apm-server CVE-2024-23448: unknown

APM Server vulnerable to Insertion of Sensitive Information into Log File in github.com/elastic/apm-server

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2556
• https://github.com/advisories/GHSA-8r33-q5j5-rh7g
• https://nvd.nist.gov/vuln/detail/CVE-2024-23448
• https://discuss.elastic.co/t/apm-server-8-12-1-security-update-esa-2024-03/352688
• https://www.elastic.co/community/security

CVE-2024-23448 · published 2024-06-28T15:28:53Z · modified 2026-08-07T08:12:30.260701260Z · JSON