CVE-2020-7016
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kiba...
Original description
The description as published by the source.
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.8.11"},{"introduced":"7.0.0"},{"fixed":"7.8.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.8.11"},{"introduced":"7.0.0"},{"fixed":"7.8.1"}]}]
References
- advisory discuss.elastic.co
- advisory elastic.co
- advisory oracle.com
- web nvd.nist.gov