CVE-2019-7609

Fixed in a distro release ExploitedEPSS 95%CVSS 9.8

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Published 2019-03-25 · In CISA KEV since 2022-01-10 · CVE record · OSV