Logstash-management-api vulnerabilities

1 known vulnerability in Logstash-management-api from Logstash-management-api Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Logstash-management-api: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-31520Jul 11, 2022Logstash-management-api ProjectEPSS 1.34%

  The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.