Lucene search
+L

3 matches found

OSV
OSV
added 2025/03/07 8:52 p.m.27 views

BIT-ELK-2025-25015 Kibana arbitrary code execution via prototype pollution

Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions = 8.15.0 and 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users tha...

9.9CVSS9.6AI score0.01248EPSS
SaveExploits0References3
Rows per page
Query Builder