CVE-2024-37287
Kibana arbitrary code execution via prototype pollution
Résumé
Kibana arbitrary code execution via prototype pollution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co