CVE-2024-12556
Kibana Prototype Pollution can lead to code injection
Summary
Kibana Prototype Pollution can lead to code injection
Original description
The description as published by the source.
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.16.1"},{"fixed":"8.17.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.16.1"},{"fixed":"8.17.1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co