Hi All, I was wondering if logstash and/or Elasticsearch is affected by this CVE? More information about this zeroday can be found here: Log4Shell: RCE 0-day exploit found in log4j 2, a popular Java logging package | LunaSec I'm not too sure whether or not we're affected so in the meantime we've …

CVE-2021-44228 aka log4shell is logstash and/or elasticsearch affected?

warkolm (Mark Walkom) December 10, 2021, 10:22pm 10

We will be making more announcements as details become clearer.

2 Likes

Topic		Replies	Views
Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2? Elasticsearch	2	1269	January 17, 2022
Is Elasticsearch affected by CVE-2021-45046 - a second vulnerability in log4j? Elasticsearch	2	5953	January 12, 2022
Logstash is affected by Apache Log4j2 2.17.0 Vulnerability CVE-2021-44832? Logstash	4	2419	February 3, 2022
Log4j CVE-2021-44832 (released 28th dec) - is ES vulnerable? Elasticsearch	10	6644	February 7, 2022
Log4j Critical Vulnerability Elastic Security	2	2767	January 7, 2022