CVE-2024-37287

creationtimestamp| type| source ---|---|--- 2024-08-13 14:36:34+00:00| seen| https://t.me/cvedetector/3013 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-13 2026-07-12 22:00:10+00:00| seen| https://t.me/securixykz/953 2026-07-13 00:00:35+00:00| seen|...

CVE-2024-37287 Kibana arbitrary code execution via prototype pollution

A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution...