Arbitrary Proxy Redirection

elasticapm is vulnerable to arbitrary proxy redirection. A variable name precedence bug due to the way HTTPPROXY and HTTPSPROXY are parsed, causes the proxy header to be incorrectly processed. This allows allow a remote attacker to redirect collected APM data to an arbitrary proxy...