Lucene search

K
osvGoogleOSV:CVE-2019-7609
HistoryMar 25, 2019 - 7:29 p.m.

CVE-2019-7609

2019-03-2519:29:02
Google
osv.dev
18

AI Score

7.8

Confidence

Low

EPSS

0.973

Percentile

99.9%

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.