Lucene search
PRIOn knowledge basePRION:CVE-2021-22150HistoryNov 22, 2023 - 1:15 a.m.
Code injection
2023-11-2201:15:00
PRIOn knowledge base
www.prio-n.com
8
code injection
malicious package upload
fleet admin
insecure loading
js-yaml library
command execution
kibana server
nvd
It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.
Related
cvelist
cvelist
CVE-2021-22150 Kibana code execution issue
2023-11-22 00:30:56
openvas
openvas
Elastic Kibana Code Execution Vulnerability (ESA-2021-21)
2021-09-27 00:00:00
nvd
nvd
CVE-2021-22150
2023-11-22 01:15:07
cve
cve
CVE-2021-22150
2023-11-22 01:15:07
nessus
nessus
Kibana 7.14.0 HTML Injection
2023-01-11 00:00:00
Kibana 7.10.2 < 7.14.1 Code Execution
2023-01-11 00:00:00
Kibana 7.9.0 < 7.14.1 Path Traversal
2023-01-11 00:00:00