# CVE-2022-30123	- Rack Vulnerability

**URL:** <https://discuss.elastic.co/t/cve-2022-30123-rack-vulnerability/335274>\
**Category:** Logstash\
**Tags:** elastic-stack-security\
**Created:** [June 6, 2023, 5:43am UTC](https://discuss.elastic.co/t/cve-2022-30123-rack-vulnerability/335274 "2023-06-06T05:43:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![priya\_dhana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priya_dhana/32/119703_2.png) [@priya\_dhana](https://discuss.elastic.co/u/priya_dhana)\
**Post date:** [June 6, 2023, 5:43am UTC](https://discuss.elastic.co/t/cve-2022-30123-rack-vulnerability/335274/1 "2023-06-06T05:43:44Z")

</div>

Security Scan has flagged Critical CVE-2022-30123 Rack::RELEASE in the logstash 8.7.1 tar file.

How can we remove rack or upgrade to a newer version?

Thanks,  
Priya V

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 6, 2023, 5:46am UTC](https://discuss.elastic.co/t/cve-2022-30123-rack-vulnerability/335274/2 "2023-06-06T05:46:47Z")

</div>

Please see [Security issues | Elastic](https://www.elastic.co/community/security) for how to raise these sorts of queries;

> Users and customers may report any other potential security issues to [security@elastic.co](mailto:security@elastic.co). This address can be used for product security related inquiries or requests about other security topics that are not explicitly mentioned here. We can accept only security issues at this address. Bug reports should be directed to the bug database of the project you're reporting it on or raised to Elastic Support.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 4, 2023, 5:47am UTC](https://discuss.elastic.co/t/cve-2022-30123-rack-vulnerability/335274/3 "2023-07-04T05:47:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.