CVE-2020-7016

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kiba...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami elk

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.8.11"},{"introduced":"7.0.0"},{"fixed":"7.8.1"}]}]

Bitnami kibana

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.8.11"},{"introduced":"7.0.0"},{"fixed":"7.8.1"}]}]

Références

advisory discuss.elastic.co
advisory elastic.co
advisory oracle.com
web nvd.nist.gov