CVE-2021-37938

CVE-2021-37938 affects Kibana on Windows, where a failure to validate a user-supplied path could cause directory traversal to load internal files ending with .pbf. Affected range per ENISA/Tenable/OSV/NVD entries centers on Kibana versions 7.9.0–7.15.1. Root cause: improper path validation allowi...