CVE-2016-1000222

Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data

published June 16, 2017

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01129 · 66.1th percentile
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data
    cvelistv5