Elastic APM Agent For Python vulnerabilities

1 vulnerability

Known vulnerabilities in Elastic APM Agent For Python, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2019-7617elasticapm_agent+2
EPSS score
1.51%
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing.