EUVD-2024-20947

Malicious code in bioql PyPI...

Kibana 8.x < 8.14.0 Multiples Vulnerabilities

According to its self-reported version number, the Kibana application running on the remote host is 7.x prior to 7.17.22 or 8.x prior to 8.14.0. It is, therefore, affected by multiples vulnerabilities. - A high-privileged user, allowed to create custom osquery packs could affect the availability ...

Kibana 7.x < 7.17.22 Multiples Vulnerabilities

According to its self-reported version number, the Kibana application running on the remote host is 7.x prior to 7.17.22 or 8.x prior to 8.14.0. It is, therefore, affected by multiples vulnerabilities. - A high-privileged user, allowed to create custom osquery packs could affect the availability ...

BIT-ELK-2024-23443

A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...

CVE-2024-23443

A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack...

CVE-2024-23443

Summary (CVE-2024-23443) A high-privileged user who can create custom osquery packs could cause Kibana downtime by uploading a maliciously crafted osquery pack, impacting availability. The issue is described across multiple sources as affecting Kibana (versions around 7.x before 7.17.22 or 8.x be...