CVE-2024-12556
Kibana Prototype Pollution can lead to code injection
Résumé
Kibana Prototype Pollution can lead to code injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.16.1"},{"fixed":"8.17.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.16.1"},{"fixed":"8.17.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web discuss.elastic.co