← voltar
CVE-2023-31415

CVE-2023-31415

CVSS 9.9 CRITICALEPSS 1.0%CWE-94
Kibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges to the Uptime/Synthetics feature could send a request that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host system with permissions of the Kibana process.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Elastic · Kibana

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://discuss.elastic.co/t/kibana-8-7-1-security-updates/332330https://www.elastic.co/community/security/