Lucene search
+L

1 matches found

OSV
OSV
added 2025/11/24 3:15 p.m.14 views

AZL-71102 CVE-2025-12977 affecting package fluent-bit for versions less than 3.1.10-4

Fluent Bit inhttp, insplunk, and inelasticsearch input plugins fail to sanitize tagkey inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tagkey values containing special characters such as newlines or ../ that are treated as valid tags...

9.1CVSS5.8AI score0.00729EPSS
SaveExploits0References1
Rows per page
Query Builder