Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-22151
HistoryNov 22, 2023 - 1:15 a.m.

Design/Logic Flaw

2023-11-2201:15:00
PRIOn knowledge base
www.prio-n.com
4
kibana
path traversal
file loading
security flaw

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to load internal files ending in the .pbf extension.

CPENameOperatorVersion
kibanage7.9.0
kibanale7.14.0

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

Related for PRION:CVE-2021-22151