CVE-2016-1000222: High severity logstash management api vulnerability
Published Jun 16, 2017
·Updated
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.
Affected Software
1 affected component
Elastic Logstash<=2.1.1
Event History
Jun 16, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1000222?
CVE-2016-1000222 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-1000222?
To fix CVE-2016-1000222, upgrade to Logstash version 2.1.2 or later.
3
What kind of attacks does CVE-2016-1000222 enable?
CVE-2016-1000222 enables attacks that exploit CSV output to inject malicious formulas.
4
Which versions of Logstash are affected by CVE-2016-1000222?
CVE-2016-1000222 affects Logstash versions prior to 2.1.2.
5
How can I mitigate risks associated with CVE-2016-1000222?
Mitigation of CVE-2016-1000222 can be achieved by avoiding the use of untrusted CSV data in Logstash.