CVE-2024-37287
Kibana arbitrary code execution via prototype pollution
概要
Kibana arbitrary code execution via prototype pollution
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co