Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xfph-vq69-5ww2

Опубликовано: 19 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.

Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.

EPSS

Процентиль: 17%
0.00056
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVSS3: 6.5
redhat
13 дней назад

Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.

CVSS3: 6.5
nvd
13 дней назад

Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.

CVSS3: 6.5
debian
13 дней назад

Improper Validation of Specified Quantity in Input (CWE-1284) in the T ...

EPSS

Процентиль: 17%
0.00056
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1284