Lucene search
GoogleOSV:CVE-2021-22151HistoryNov 22, 2023 - 1:15 a.m.
CVE-2021-22151
2023-11-2201:15:07
Google
osv.dev
7
kibana
vulnerability
file loading
malicious user
security alert
It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to load internal files ending in the .pbf extension.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticsearch | eq | 7.9.2 | |
| elasticsearch | eq | 7.9.0 | |
| elasticsearch | eq | 7.9.1 | |
| elasticsearch | eq | 7.9.3 |
Related
cvelist
cvelist
CVE-2021-22151 Kibana path traversal issue
2023-11-22 00:36:51
openvas
openvas
Elastic Kibana Path Traversal Vulnerability (ESA-2021-22)
2021-09-27 00:00:00
nvd
nvd
CVE-2021-22151
2023-11-22 01:15:07
hackerone
hackerone
prion
prion
Design/Logic Flaw
2023-11-22 01:15:00
cve
cve
CVE-2021-22151
2023-11-22 01:15:07
nessus
nessus
Kibana 7.10.2 < 7.14.1 Code Execution
2023-01-11 00:00:00
Kibana 7.9.0 < 7.14.1 Path Traversal
2023-01-11 00:00:00
Kibana 7.14.0 HTML Injection
2023-01-11 00:00:00