105 matches found
BIT-KIBANA-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
BIT-ELK-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
CVE-2026-72658
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
EUVD-2026-58269
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
CVE-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
CVE-2026-72658
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
CVE-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
Cross-Site Request Forgery CWE-352 in Kibana can lead to privilege escalation via Cross Site Request Forgery CAPEC-62. A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issu...
CVE-2026-72658
CVE-2026-72658 describes a Cross-Site Request Forgery (CWE-352) in Kibana that can lead to privilege escalation when a user who can create visualizations saves a specially crafted Vega visualization. When another user opens that visualization, authenticated requests are issued in the viewing user...
PT-2026-71770
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Cross-Site Request Forgery CSRF allows a user with permissions to create visualizations to save a specially crafted Vega visualization. When another user opens this visualization, it triggers...
SUSE SLES12 Security Update : kernel (Live Patch 62 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2025:4194-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:4194-1 advisory. This update for the SUSE Linux Enterprise kernel 4.12.14-122.234 fixes one security issue The following security issue was fixed: - CVE-2024-53141:...
Malicious code in aril-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1546b067c19f14ae96cac27fbd04209781b32c2db334eb6e13d74dc2caf6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in intan-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f9857f9f6ca01ce21dd828e0477acf8af667d8f3b7c50dbbde80e9c0baeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in billa-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66eb60eb2d0f6f5fedf02cd5056c869229a42c2ffa739dcc2d21e3005e31c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152422 Malicious code in alvino-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152504 Malicious code in alvira-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5179dac34e3616ea6c5a3731a5b54e9ab4460a81546c30465658f2e4470c8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in alvino-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6287610bb2197273311326c2d681c944c2ea76fbf15f0eebeec07c9bd5ad2615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152864 Malicious code in aril-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1546b067c19f14ae96cac27fbd04209781b32c2db334eb6e13d74dc2caf6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164936 Malicious code in rita-62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70e7d0d48ef84b27938da40ed12fe90ec4422ce45944b392ee6cbda16971198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...