Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-37279

Опубликовано: 13 июн. 2024
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
Версия от 8.6.3 (включая) до 8.14.0 (исключая)

EPSS

Процентиль: 32%
0.00124
Низкий

4.3 Medium

CVSS3

Дефекты

NVD-CWE-Other
CWE-284

Связанные уязвимости

CVSS3: 4.3
redhat
больше 1 года назад

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

CVSS3: 4.3
debian
больше 1 года назад

A flaw was discovered in Kibana, allowing view-only users of alerting ...

CVSS3: 4.3
github
больше 1 года назад

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

EPSS

Процентиль: 32%
0.00124
Низкий

4.3 Medium

CVSS3

Дефекты

NVD-CWE-Other
CWE-284