Description
APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailable_shards_exception for a specific document, since the ES response line contains the document body, and that APM server logs the ES response line on error, the document is effectively logged.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | APM Server | — | 8.14.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/elastic/apm-server | < 8.14.0 | 8.14.0 | GHSA-f6cj-4h3g-hwq4 |
| Go | github.com/elastic/apm-server | all versions | — | GO-2024-3037 |