CVE-2019-7618

2019-10-0118:15:13

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.8%

JSON

A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user.

CPENameOperatorVersion
elasticsearcheq7.3.0
elasticsearcheq4.1.0
elasticsearcheq5.0.0-alpha2
elasticsearcheq0.5.0
elasticsearcheq0.16.0
elasticsearcheq7.0-known-good
elasticsearcheq5.0.0-alpha1
elasticsearcheq0.10.0
elasticsearcheq4.0.0-beta1
elasticsearcheq0.19.0.RC2

Name	Operator	Version
elasticsearch	eq	7.3.0
elasticsearch	eq	4.1.0
elasticsearch	eq	5.0.0-alpha2
elasticsearch	eq	0.5.0
elasticsearch	eq	0.16.0
elasticsearch	eq	7.0-known-good
elasticsearch	eq	5.0.0-alpha1
elasticsearch	eq	0.10.0
elasticsearch	eq	4.0.0-beta1
elasticsearch	eq	0.19.0.RC2