Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xh25-gx5f-4hqg

Опубликовано: 19 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even though they do not have permission to do so, making it visible to everyone in the space via a crafted a HTTP request.

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even though they do not have permission to do so, making it visible to everyone in the space via a crafted a HTTP request.

EPSS

Процентиль: 10%
0.00036
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
nvd
около 2 месяцев назад

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even though they do not have permission to do so, making it visible to everyone in the space via a crafted a HTTP request.

CVSS3: 4.3
debian
около 2 месяцев назад

Improper Authorization (CWE-285) in Kibana can lead to privilege escal ...

CVSS3: 4.3
fstec
около 2 месяцев назад

Уязвимость сервиса визуализации данных Kibana, связанная с ошибками авторизации, позволяющая нарушителю повысить привилегии

EPSS

Процентиль: 10%
0.00036
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863