CVE-2019-7609

🗓️ 04 Apr 2019 03:50:05Reported by redhat.comType

Arbitrary code execution flaw in Timelion visualizer in Kibana versions before 5.6.15 and 6.6.1, allows attacker to execute arbitrary commands with host system permission

Reporter	Title	Published	Views	Family All 60
0day.today	Kibana Timelion Prototype Pollution Remote Code Execution Exploit	11 Sep 202300:00	–	zdt
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	8 Dec 202020:38	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	6 May 202015:20	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari	23 Jan 202218:42	–	gitee
GithubExploit	Exploit for Code Injection in Elastic Kibana	21 Oct 201907:32	–	githubexploit
GithubExploit	PoC_n_Dockerfile_4_PentestFinalProject_Group02	14 Apr 202614:38	–	githubexploit
GithubExploit	Exploit for Type Confusion in Adobe Acrobat_Dc	25 Oct 202511:16	–	githubexploit
GithubExploit	Exploit for Code Injection in Elastic Kibana	21 Oct 201915:31	–	githubexploit
GithubExploit	Exploit for Code Injection in Elastic Kibana	24 Aug 202104:38	–	githubexploit
Tenable Nessus	Kibana 5.x < 5.6.15 / 6.x < 6.6.1 Multiple Vulnerabilities	24 Oct 201900:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-7609
discuss	www.discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Jan 2024 18:40Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.19.8 - 10

CVSS 210

CVSS 37.5

EPSS0.95338