Elastic Stack 6.6.1 and 5.6.15 security update

🗓️ 19 Feb 2019 17:09:47Reported by ElasticCoType

Kibana security update fixes XSS and remote code execution; upgrade to 5.6.15 or 6.6.1.

Reporter	Title	Published	Views	Family All 126
0day.today	Kibana Timelion Prototype Pollution Remote Code Execution Exploit	11 Sep 202300:00	–	zdt
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	8 Dec 202020:38	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	6 May 202015:20	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari	23 Jan 202218:42	–	gitee
GithubExploit	Exploit for Code Injection in Elastic Kibana	21 Oct 201907:32	–	githubexploit
GithubExploit	PoC_n_Dockerfile_4_PentestFinalProject_Group02	14 Apr 202614:38	–	githubexploit
GithubExploit	Exploit for Type Confusion in Adobe Acrobat_Dc	25 Oct 202511:16	–	githubexploit
GithubExploit	Exploit for Code Injection in Elastic Kibana	21 Oct 201915:31	–	githubexploit
GithubExploit	Exploit for Code Injection in Elastic Kibana	24 Aug 202104:38	–	githubexploit
Tenable Nessus	Kibana 5.x < 5.6.15 / 6.x < 6.6.1 Multiple Vulnerabilities	24 Oct 201900:00	–	nessus