Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-823g-p8g4-q559

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

EPSS

Процентиль: 51%
0.00281
Низкий

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 4.9
redhat
почти 5 лет назад

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

CVSS3: 6.5
nvd
больше 4 лет назад

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

CVSS3: 6.5
debian
больше 4 лет назад

Kibana versions before 7.12.1 contain a denial of service vulnerabilit ...

EPSS

Процентиль: 51%
0.00281
Низкий

Дефекты

CWE-400