PT-2019-18669

Name of the Vulnerable Software and Affected Versions Elastic APM agent for Python versions prior to 5.1.0 Description The issue arises when the Elastic APM agent for Python is run as a CGI script, and a remote attacker can control the proxy header, leading to a variable name clash flaw. This fla...

CVE-2019-7617: Improper Input Validation

When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing...