Lucene search
GoogleOSV:CVE-2022-38778HistoryFeb 08, 2023 - 9:15 p.m.
CVE-2022-38778
2023-02-0821:15:10
Google
osv.dev
15
cve-2022-38778
kibana
third-party dependency
authenticated user
server crash
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
High
EPSS
0.004
Percentile
73.4%
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.
Related
cve
cve
CVE-2022-38778
2023-02-08 21:15:10
CVE-2022-38900
2022-11-28 13:15:10
nvd
nvd
CVE-2022-38778
2023-02-08 21:15:10
CVE-2022-38900
2022-11-28 13:15:10
nessus
nessus
Kibana ESA-2023-02
2023-04-06 00:00:00
RHEL 9 : pcs (RHSA-2023:6316)
2023-11-07 00:00:00
Fedora 37 : pcs (2023-ae96dd6105)
2023-07-01 00:00:00
cvelist
cvelist
CVE-2022-38778
2023-02-08 00:00:00
CVE-2022-38900
2022-11-28 00:00:00
prion
prion
Design/Logic Flaw
2023-02-08 21:15:00
Input validation
2022-11-28 13:15:00
openvas
openvas
Elastic Kibana 7.0.0 < 7.17.9, 8.0.0 < 8.6.1 DoS Vulnerability (ESA-2023-02)
2023-02-06 00:00:00
Fedora: Security Advisory for pcs (FEDORA-2023-ae96dd6105)
2023-07-02 00:00:00
Fedora: Security Advisory (FEDORA-2023-e4cb7a5bda)
2024-09-10 00:00:00
redhatcve
redhatcve
CVE-2022-38778
2023-02-22 04:59:16
CVE-2022-38900
2023-02-16 21:29:43
redhat
redhat
fedora
fedora
[SECURITY] Fedora 37 Update: pcs-0.11.6-1.fc37
2023-07-01 00:38:09
[SECURITY] Fedora 38 Update: pcs-0.11.6-1.fc38
2023-07-01 01:46:23
[SECURITY] Fedora 37 Update: yarnpkg-1.22.19-5.fc37
2023-03-30 01:21:37
veracode
veracode
Denial Of Service (DoS)
2022-11-29 02:52:14
osv
osv
Low: pcs security, bug fix, and enhancement update
2023-11-07 00:00:00
CVE-2022-38900
2022-11-28 13:15:10
decode-uri-component vulnerable to Denial of Service (DoS)
2022-11-28 15:30:24
ibm
ibm
oraclelinux
oraclelinux
pcs
2023-11-12 00:00:00
nodejs:14 security, bug fix, and enhancement update
2023-04-12 00:00:00
almalinux
almalinux
Low: pcs security, bug fix, and enhancement update
2023-11-07 00:00:00
Important: nodejs:14 security, bug fix, and enhancement update
2023-04-12 00:00:00
github
github
decode-uri-component vulnerable to Denial of Service (DoS)
2022-11-28 15:30:24
rocky
rocky
nodejs:14 security, bug fix, and enhancement update
2023-04-26 15:28:13
redos
redos
ROS-20240704-07
2024-07-04 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
High
EPSS
0.004
Percentile
73.4%
Related for OSV:CVE-2022-38778