未評価
Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could...
CVE-2023-31414
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host system with permissions of the Kibana process.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web discuss.elastic.co
- web elastic.co