high7.5
CVE-2016-1000222
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.
Impact
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Logstash | through 2.1.1 |