Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7fgx-pmw9-49h5

Опубликовано: 13 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.

A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.

EPSS

Процентиль: 74%
0.0085
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-1321
CWE-94

Связанные уязвимости

CVSS3: 9.1
nvd
больше 1 года назад

A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.

CVSS3: 9.1
debian
больше 1 года назад

A flaw allowing arbitrary code execution was discovered in Kibana. An ...

CVSS3: 9.9
fstec
больше 1 года назад

Уязвимость функций коннектора ML и Alerting сервиса визуализации данных Kibana, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 74%
0.0085
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-1321
CWE-94