Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qcp3-347v-7f6g

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.

EPSS

Процентиль: 19%
0.0027
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 6.5
nvd
15 дней назад

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.

CVSS3: 6.5
debian
15 дней назад

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to deni ...

EPSS

Процентиль: 19%
0.0027
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400