Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/13 5:42 a.m.3 views

BIT-LOGSTASH-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

9.8CVSS6.5AI score0.00545EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/08 4:50 p.m.32 views

CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

8.1CVSS0.00545EPSS
SaveExploits0References1
Rows per page
Query Builder