Lucene search
Veracode Vulnerability DatabaseVERACODE:39500HistoryMar 03, 2023 - 7:55 a.m.
Arbitrary Code Execution
2023-03-0307:55:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
arbitrary code execution
vulnerability
redirect issue
kibana url
elastic/elasticsearch
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
29.9%
elastic/elasticsearch is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a redirect issue that leads to a user being redirected to an arbitrary website if they use a maliciously crafted kibana url.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kibana-123 | eq | 5.2.1 | |
| kibana-123 | eq | 5.2.1 |
Related
prion
prion
Open redirect
2023-02-22 00:15:00
osv
osv
CVE-2022-38779
2023-02-22 00:15:11
cvelist
cvelist
CVE-2022-38779
2023-02-21 00:00:00
openvas
openvas
redhatcve
redhatcve
CVE-2022-38779
2023-02-22 04:59:25
nvd
nvd
CVE-2022-38779
2023-02-22 00:15:11
cve
cve
CVE-2022-38779
2023-02-22 00:15:11
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
29.9%
Related for VERACODE:39500