Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cpwf-64qm-2jpm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

EPSS

Процентиль: 100%
0.82251
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-829

Связанные уязвимости

CVSS3: 6.3
redhat
почти 8 лет назад

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

CVSS3: 9.8
nvd
больше 7 лет назад

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

CVSS3: 9.8
debian
больше 7 лет назад

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file incl ...

EPSS

Процентиль: 100%
0.82251
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-829