Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-22139

Опубликовано: 13 мая 2021
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
Версия до 7.12.1 (исключая)

EPSS

Процентиль: 51%
0.00281
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 4.9
redhat
почти 5 лет назад

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

CVSS3: 6.5
debian
больше 4 лет назад

Kibana versions before 7.12.1 contain a denial of service vulnerabilit ...

github
больше 3 лет назад

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

EPSS

Процентиль: 51%
0.00281
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-400
CWE-400