CVE-2023-31413

2023-05-0400:00:00

CWE-200

elastic

www.cve.org

filebeat

httpjson

authorization headers

logs

debugging

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled.

CNA Affected

[
  {
    "vendor": "Elastic",
    "product": "Filebeat",
    "versions": [
      {
        "version": "versions through 7.17.9 and 8.6.2",
        "status": "affected"
      }
    ]
  }
]