Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 3

Количество 3

nvd логотип

CVE-2026-49093

2 месяца назад

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

CVSS3: 6.3
EPSS: Низкий
debian логотип

CVE-2026-49093

2 месяца назад

Server-Side Request Forgery (CWE-918) in Kibana can allow an authentic ...

CVSS3: 6.3
EPSS: Низкий
github логотип

GHSA-qf29-h8cg-2hg4

2 месяца назад

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

CVSS3: 6.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-49093

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

CVSS3: 6.3
0%
Низкий
2 месяца назад
debian логотип
CVE-2026-49093

Server-Side Request Forgery (CWE-918) in Kibana can allow an authentic ...

CVSS3: 6.3
0%
Низкий
2 месяца назад
github логотип
GHSA-qf29-h8cg-2hg4

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

CVSS3: 6.3
0%
Низкий
2 месяца назад

Уязвимостей на страницу