CVE-2016-1000222

Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-06-16

Last modified

2024-08-06

Weaknesses

CWE-88

Affected products

• Logstash (Elastic)

References

• https://www.elastic.co/community/security