CVE-2021-22133

The CVE-2021-22133 vulnerability affects the Elastic APM Go agent (go.elastic.co/apm) versions before 1.11.0. During a application panic, the agent may log HTTP header details without sanitizing sensitive information, potentially leaking headers and affecting confidentiality. Root cause: headers ...

CVE-2019-7617

Elastic APM for Python versions before 5.1.0 is affected when run as a CGI script. A variable name clash occurs if an attacker can control the proxy header, potentially redirecting collected APM data to a proxy of their choosing. Impact described is data redirection/exfiltration. Recommended reme...