Unscored severity · published Jun 15, 2015
CVE-2015-4152
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to…
–
CVSS
3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
Logstash · Elastic
through 1.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4152
packetstormsecurity.com
http://packetstormsecurity.com/files/132233/Logstash-1.4.2-Directory-Traversal.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/535725/100/0/threaded
Vendor Advisory
https://www.elastic.co/blog/logstash-1-4-3-released
Vendor Advisory
https://www.elastic.co/community/security/
More from Logstash
9.8
CVE-2026-33466
Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write
9.8
CVE-2019-7612
A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs
7.5
CVE-2019-7620
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
7.5
CVE-2015-5378
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server
7.5
CVE-2016-10363
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of…