What is GHSA-8qhq-rq4j-8prj?

GHSA-8qhq-rq4j-8prj is a security advisory published by GitHub Security Advisories with High severity. Elasticsearch Logstash allows remote attackers to execute arbitrary commands

Which CVE IDs does GHSA-8qhq-rq4j-8prj cover?

GHSA-8qhq-rq4j-8prj covers the following CVE IDs: CVE-2014-4326. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-8qhq-rq4j-8prj?

GHSA-8qhq-rq4j-8prj affects 1 product, including: rubygems/logstash:\u003e= 1.0.14, \u003c 1.4.2.

GHSA-8qhq-rq4j-8prjHigh

Elasticsearch Logstash allows remote attackers to execute arbitrary commands

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 16, 2025

🔗 CVE IDs covered (1)

CVE-2014-4326 →

📋 Description

Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

🎯 Affected products1

rubygems/logstash:>= 1.0.14, < 1.4.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2014-4326
https://www.elastic.co/community/security
https://web.archive.org/web/20140804031140/http://www.elasticsearch.org/blog/logstash-1-4-2
https://web.archive.org/web/20201207013408/http://www.securityfocus.com/archive/1/532841/100/0/threaded
https://github.com/advisories/GHSA-8qhq-rq4j-8prj