Количество 4
Количество 4
CVE-2024-37287
A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
CVE-2024-37287
A flaw allowing arbitrary code execution was discovered in Kibana. An ...
GHSA-7fgx-pmw9-49h5
A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
BDU:2024-06005
Уязвимость функций коннектора ML и Alerting сервиса визуализации данных Kibana, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-37287 A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution. | CVSS3: 9.1 | 1% Низкий | больше 1 года назад |
| CVE-2024-37287 A flaw allowing arbitrary code execution was discovered in Kibana. An ... | CVSS3: 9.1 | 1% Низкий | больше 1 года назад |
| GHSA-7fgx-pmw9-49h5 A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution. | CVSS3: 9.1 | 1% Низкий | больше 1 года назад |
 | BDU:2024-06005 Уязвимость функций коннектора ML и Alerting сервиса визуализации данных Kibana, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.9 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу