CVE-2016-1000222
HighSummary
Logstash versions prior to 2.1.2 are vulnerable to attacks via engineered input that can create malicious formulas in CSV data.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious code, potentially leading to unauthorized access or data corruption.
Recommendation
It is recommended to upgrade Logstash to version 2.1.2 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Logstash
See all- CVE-2015-5378High
Logstash versions 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allow remote attackers to read communications between Logstash Forwarder agent and Logstash server.
- CVE-2016-10363High
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, are vulnerable to denial of service attacks. A remote attacker can exploit crafted Netflow v5, Netflow v9, or IPFIX packets, causing the Logstash process to crash.
- CVE-2026-33466High
Logstash contains a path traversal vulnerability (CWE-22) in archive extraction utilities. An attacker can supply a crafted archive, allowing arbitrary file write with Logstash process privileges. In configurations with automatic pipeline reloading, this can lead to remote code execution.
Original NVD description (English source)
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.