Описание
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user with low-level privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, rendering it unavailable to all users.
Уязвимые конфигурации
Конфигурация 1Версия от 8.0.0 (включая) до 8.19.16 (исключая)Версия от 9.0.0 (включая) до 9.3.5 (исключая)Версия от 9.4.0 (включая) до 9.4.2 (исключая)
Одно из
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00332
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 6.5
github
22 дня назад
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user with low-level privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, rendering it unavailable to all users.
EPSS
Процентиль: 27%
0.00332
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-770