Elastic Kibana < 8.7.1 Arbitrary Code Execution

The Elastic Kibana software on the remote host is missing a security update. It is, therefore, affected by multiple arbitrary code execution vulnerabilities: - An attacker with All privileges to the Uptime/Synthetics feature could send a request that will attempt to execute JavaScript code. This...

SUSE CVE-2023-31414

Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host syste...

CVE-2023-31414

CVE-2023-31414 affects Elastic Kibana 8.0.0 through 8.7.0. An attacker with write access to Kibana YAML or environment configuration can inject a payload that executes JavaScript code, potentially allowing arbitrary commands on the host with Kibana process permissions. Public documents list Elast...