https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 05:48:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-51587 EUVD-2026-51587 https://cve.radiocsirt.org/vuln/euvd-2026-51587 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7616 <p>Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.</p> <p>Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7616 https://cve.radiocsirt.org/vuln/ghsa-cjvv-mvp7-x62q <p>Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.</p> <p>Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.</p> https://cve.radiocsirt.org/vuln/ghsa-cjvv-mvp7-x62q https://cve.radiocsirt.org/vuln/gsd-2019-7616 gsd-2019-7616 https://cve.radiocsirt.org/vuln/gsd-2019-7616 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3184 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3184