Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-534g-6jq4-vq89

Опубликовано: 22 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.

It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.

EPSS

Процентиль: 37%
0.00162
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 6.6
nvd
около 2 лет назад

It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.

CVSS3: 6.6
debian
около 2 лет назад

It was discovered that a user with Fleet admin permissions could uploa ...

EPSS

Процентиль: 37%
0.00162
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-94