CVE-2023-31413

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200 CWE-532

Affected software

Vendor	Product	Versions
Elastic	Filebeat	versions through 7.17.9 and 8.6.2

References

https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327Vendor Advisory
https://www.elastic.co/community/security/Vendor Advisory
https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327Vendor Advisory
https://www.elastic.co/community/security/Vendor Advisory

Timeline

Published: May 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-314148.8Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configurat CVE-2023-314158.8Kibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges to the Uptime/Synthetics feature could send CVE-2023-314165.3Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Serve CVE-2023-314174.4Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this filtering CVE-2023-314187.5An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elas CVE-2023-314197.5A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow an CVE-2023-31425.4Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.CVE-2023-314217.5It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server cert CVE-2023-314227.5An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only CVE-2023-314235.5Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking CVE-2023-314249.8Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and CVE-2023-314257.8A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow