Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-grxp-xwh4-267v

Опубликовано: 08 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

EPSS

Процентиль: 14%
0.00226
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.3
nvd
4 месяца назад

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

CVSS3: 6.3
debian
4 месяца назад

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead ...

EPSS

Процентиль: 14%
0.00226
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-918