CVE-2022-39379lowCWE-502

CVE-2022-39379: falha de baixa gravidade em fluentd

Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar fluentd+ Monitorar fluentd

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

20Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.1epss 45%
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. A remote code execution (RCE) vulnerability in non-default configurations of Fluentd allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Fluentd setups are only affected if the environment variable `FLUENT_OJ_OPTION_MODE` is explicitly set to `object`. Please note: The option FLUENT_OJ_OPTION_MODE was introduced in Fluentd version 1.13.2. Earlier versions of Fluentd are not affected by this vulnerability. This issue was patched in version 1.15.3. As a workaround do not use `FLUENT_OJ_OPTION_MODE=object`.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
fluent · fluentd
CVEs relacionadas — fluentd

No mesmo produto, das mais perigosas para as menos.

CVE-2021-41186MEDIUMReDoS vulnerability in parser_apache2EPSS 2.2%CVE-2026-44024CRITICALFluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` PlaceholderEPSS 1.1%CVE-2026-44160HIGHFluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`EPSS 0.6%CVE-2026-44025HIGHFluentd: Exposure of Sensitive Information via Monitor Agent APIEPSS 0.5%CVE-2026-44161HIGHFluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`EPSS 0.4%