Description (CNA)
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / kibana | affected Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.0 |
CWE
CWE-20
References
- https://www.elastic.co/community/security
- https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.