Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cpwf-64qm-2jpm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

EPSS

Процентиль: 100%
0.93783
Критический

9.8 Critical

CVSS3

Дефекты

CWE-829

Связанные уязвимости

CVSS3: 6.3
redhat
больше 7 лет назад

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

CVSS3: 9.8
nvd
около 7 лет назад

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

CVSS3: 9.8
debian
около 7 лет назад

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file incl ...

EPSS

Процентиль: 100%
0.93783
Критический

9.8 Critical

CVSS3

Дефекты

CWE-829