CVE-2022-38778

Опубликовано: 08 фев. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

Ссылки

https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661
Vendor Advisory
https://www.elastic.co/community/security
Vendor Advisory
https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661
Vendor Advisory
https://www.elastic.co/community/security
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:decode-uri-component_project:decode-uri-component:*:*:*:*:*:node.js:*:*

Версия до 0.2.1 (исключая)

cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*

Версия от 7.0.0 (включая) до 7.17.9 (исключая)

cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*

Версия от 8.0.0 (включая) до 8.6.1 (исключая)

EPSS

Процентиль: 77%

0.01011

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVE-2022-38778

CVSS3: 6.5

redhat

почти 3 года назад

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

CVE-2022-38778

CVSS3: 6.5

debian

почти 3 года назад

A flaw (CVE-2022-38900) was discovered in one of Kibana\u2019s third p ...

GHSA-ph5g-2r58-hm46

CVSS3: 6.5

github

больше 2 лет назад

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

EPSS

Процентиль: 77%

0.01011

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20