CVE-2024-12556

creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftviy6u2c 2025-04-08 21:48:46+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114304543986310341 2025-04-09 07:35:29+00:00| seen|...

CVE-2024-12556

Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal...

CVE-2024-12556

Kibana is affected by a Prototype Pollution vulnerability (CVE-2024-12556) that can lead to code injection via an unrestricted file upload combined with path traversal. The ESA-2025-02 advisory lists affected versions 8.16.1–8.16.3 and 8.17.0–8.17.1, with remediation to upgrade to Kibana 8.16.4 o...

CVE-2024-12556 Kibana Prototype Pollution can lead to code injection

Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal...