Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2529-45pr-jcrg

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information exposure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a lower-privileged user can cause data from sources they are not authorized to access to be processed using another user's privileges.

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information exposure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a lower-privileged user can cause data from sources they are not authorized to access to be processed using another user's privileges.

EPSS

Процентиль: 6%
0.00162
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
nvd
20 дней назад

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information exposure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a lower-privileged user can cause data from sources they are not authorized to access to be processed using another user's privileges.

CVSS3: 4.3
debian
20 дней назад

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kiba ...

EPSS

Процентиль: 6%
0.00162
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863