Total vulnerabilities in the database
A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
| Software | From | Fixed in |
|---|---|---|
| elastic / kibana | 8.0.0 | 8.14.2 |
| elastic / kibana | 7.7.0 | 7.17.23 |