deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15924
Published: 2020-07-24
Description: There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://elbae.github.io/jekyll/update/2020/07/14/vulns-01.html; https://elbae.github.io/jekyll/update/2020/07/14/vulns-01.html
CVE: CVE-2020-14175
Published: 2020-07-24
Description: Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/CONFSERVER-60102; https://jira.atlassian.com/browse/CONFSERVER-60102
CVE: CVE-2020-15778
Published: 2020-07-24
Description: scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVSS Score: 7.4 (HIGH)
CWE: CWE-78, CWE-78
References: https://access.redhat.com/errata/RHSA-2024:3166; https://github.com/cpandya2909/CVE-2020-15778/; https://news.ycombinator.com/item?id=25005567
CVE: CVE-2020-14297
Published: 2020-07-24
Description: A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14297; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14297
CVE: CVE-2020-14307
Published: 2020-07-24
Description: A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-404
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14307; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14307
CVE: CVE-2020-15860
Published: 2020-07-24
Description: Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute any application in the backend operating system through the web application, despite the affected application not being published. In addition, it was discovered that it is possible to access any host in the internal domain, even if it has no published applications or the mentioned host is no longer associated with that server farm.
CVSS Score: 9.9 (CRITICAL)
References: https://kb.parallels.com/en/125112; https://www.coresecurity.com/core-labs/advisories/parallels-ras-os-command-execution; https://www.parallels.com/products/ras/remote-application-server/
CVE: CVE-2020-8317
Published: 2020-07-24
Description: A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426, CWE-426
References: https://iknow.lenovo.com.cn/detail/dc_190088.html; https://iknow.lenovo.com.cn/detail/dc_190088.html
CVE: CVE-2020-8326
Published: 2020-07-24
Description: An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.
CVSS Score: 7.3 (HIGH)
CWE: CWE-428, CWE-428
References: https://iknow.lenovo.com.cn/detail/dc_190088.html; https://iknow.lenovo.com.cn/detail/dc_190088.html
CVE: CVE-2020-15932
Published: 2020-07-24
Description: Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-005.md; https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-005.md
CVE: CVE-2020-14725
Published: 2020-07-24
Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS Score: 4.9 (MEDIUM)
References: https://security.gentoo.org/glsa/202105-27; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.oracle.com/security-alerts/cpujul2020.html
CVE: CVE-2020-15945
Published: 2020-07-24
Description: Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function.
CVSS Score: 5.5 (MEDIUM)
References: http://lua-users.org/lists/lua-l/2020-07/msg00123.html; https://github.com/lua/lua/commit/a2195644d89812e5b157ce7bac35543e06db05e3; https://www.lua.org/bugs.html#5.4.0-8
CVE: CVE-2020-8174
Published: 2020-07-24
Description: napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-191
References: https://hackerone.com/reports/784186; https://security.gentoo.org/glsa/202101-07; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8175
Published: 2020-07-24
Description: Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/842462; https://hackerone.com/reports/842462
CVE: CVE-2020-8207
Published: 2020-07-24
Description: Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-287
References: https://support.citrix.com/article/CTX277662; https://support.citrix.com/article/CTX277662
CVE: CVE-2020-10600
Published: 2020-07-24
Description: An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-10602
Published: 2020-07-24
Description: In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-10606
Published: 2020-07-24
Description: In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other users, such as from a shared workstation or terminal server deployment.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-10608
Published: 2020-07-24
Description: In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized information disclosure, deletion, or modification.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347, CWE-347
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-10610
Published: 2020-07-24
Description: In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or modification.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-426
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-12812
Published: 2020-07-24
Description: An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-178, CWE-287, CWE-287
References: https://fortiguard.com/psirt/FG-IR-19-283; https://fortiguard.com/psirt/FG-IR-19-283; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-12812
CVE: CVE-2020-10604
Published: 2020-07-25
Description: In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-755
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-10614
Published: 2020-07-25
Description: In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, deletion, or modification is possible if a victim views the infected display.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-133-02
CVE: CVE-2020-7681
Published: 2020-07-25
Description: This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-MARSCODE-590122; https://snyk.io/vuln/SNYK-JS-MARSCODE-590122
CVE: CVE-2020-7682
Published: 2020-07-25
Description: This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-MARKEDTREE-590121; https://snyk.io/vuln/SNYK-JS-MARKEDTREE-590121
CVE: CVE-2020-7683
Published: 2020-07-25
Description: This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-ROLLUPPLUGINSERVER-590123; https://snyk.io/vuln/SNYK-JS-ROLLUPPLUGINSERVER-590123
CVE: CVE-2020-7686
Published: 2020-07-25
Description: This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-ROLLUPPLUGINDEVSERVER-590124; https://snyk.io/vuln/SNYK-JS-ROLLUPPLUGINDEVSERVER-590124
CVE: CVE-2020-7687
Published: 2020-07-25
Description: This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-FASTHTTP-572892; https://snyk.io/vuln/SNYK-JS-FASTHTTP-572892
CVE: CVE-2020-15953
Published: 2020-07-27
Description: LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."
CVSS Score: 7.4 (HIGH)
CWE: CWE-74
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00075.html; https://github.com/dinhvh/libetpan/issues/386
CVE: CVE-2020-15954
Published: 2020-07-27
Description: KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://bugs.kde.org/show_bug.cgi?id=423426; https://lists.debian.org/debian-lts-announce/2020/07/msg00030.html; https://bugs.kde.org/show_bug.cgi?id=423426
CVE: CVE-2020-5611
Published: 2020-07-27
Description: Cross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN05502028/index.html; https://wordpress.org/plugins/social-rocket/; https://jvn.jp/en/jp/JVN05502028/index.html
CVE: CVE-2020-7694
Published: 2020-07-27
Description: This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the console or a log file. When attackers request crafted URLs with percent-encoded escape sequences, the logging component will log the URL after it's been processed with urllib.parse.unquote, therefore converting any percent-encoded characters into their single-character equivalent, which can have special meaning in terminal emulators. By requesting URLs with crafted paths, attackers can: * Pollute uvicorn's access logs, therefore jeopardising the integrity of such files. * Use ANSI sequence codes to attempt to interact with the terminal emulator that's displaying the logs (either in real time or from a file).
CVSS Score: 3.7 (LOW)
CWE: CWE-94, CWE-116
References: https://github.com/encode/uvicorn; https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560; https://github.com/encode/uvicorn
CVE: CVE-2020-7695
Published: 2020-07-27
Description: Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add arbitrary headers to HTTP responses, or even return an arbitrary response body, whenever crafted input is used to construct HTTP headers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: https://github.com/encode/uvicorn; https://snyk.io/vuln/SNYK-PYTHON-UVICORN-570471; https://github.com/encode/uvicorn
CVE: CVE-2020-11110
Published: 2020-07-27
Description: Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/grafana/grafana/blob/master/CHANGELOG.md; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/grafana/grafana/blob/master/CHANGELOG.md
CVE: CVE-2020-9077
Published: 2020-07-27
Description: HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this vulnerability and obtain some information about the device. Successful exploit may cause information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200722-03-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200722-03-smartphone-en
CVE: CVE-2020-9251
Published: 2020-07-27
Description: HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function. Successful exploit could allow the attacker to bypass the limit of student mode function. Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8).
CVSS Score: 2.4 (LOW)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200722-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200722-02-smartphone-en
CVE: CVE-2020-15592
Published: 2020-07-27
Description: SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC (Inter-Process Communication) primitives to enable the processes to cooperate. The remotely callable methods from remotable objects available through interprocess communication allow loading of arbitrary plugins (i.e., C# assemblies) from the "%PROGRAMFILES(X86)%/Aternity Information Systems/Assistant/plugins” directory, where the name of the plugin is passed as part of an XML-serialized object. However, because the name of the DLL is concatenated with the “.\plugins” string, a directory traversal vulnerability exists in the way plugins are resolved.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-Prem; https://sec-consult.com/en/blog/advisories/privilege-escalation-vulnerability-in-steelcentral-aternity-agent-cve-2020-15592-cve-2020-15593/; https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-Prem
CVE: CVE-2020-15593
Published: 2020-07-27
Description: SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC (Inter-Process Communication) primitives to enable the processes to cooperate. Any user in the system is allowed to access the interprocess communication channel AternityAgentAssistantIpc, retrieve a serialized object and call object methods remotely. Among others, the methods allow any user to: (1) Create and/or overwrite arbitrary XML files across the system; (2) Create arbitrary directories across the system; and (3) Load arbitrary plugins (i.e., C# assemblies) from the "%PROGRAMFILES(X86)/Aternity Information Systems/Assistant/plugins” directory and execute code contained in them.
CVSS Score: 7.8 (HIGH)
References: https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-Prem; https://sec-consult.com/en/blog/advisories/privilege-escalation-vulnerability-in-steelcentral-aternity-agent-cve-2020-15592-cve-2020-15593/; https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-Prem
CVE: CVE-2020-4405
Published: 2020-07-27
Description: IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179484; https://www.ibm.com/support/pages/node/6252479; https://exchange.xforce.ibmcloud.com/vulnerabilities/179484
CVE: CVE-2020-4408
Published: 2020-07-27
Description: The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. IBM X-Force ID: 179536.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179536; https://www.ibm.com/support/pages/node/6252401; https://exchange.xforce.ibmcloud.com/vulnerabilities/179536
CVE: CVE-2020-4498
Published: 2020-07-27
Description: IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182118; https://www.ibm.com/support/pages/node/6252409; https://exchange.xforce.ibmcloud.com/vulnerabilities/182118
CVE: CVE-2020-15103
Published: 2020-07-27
Description: In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data that will crash the client later on (invalid length arguments to a `memcpy`) This has been fixed in 2.2.0. As a workaround, stop using command line arguments /gfx, /gfx-h264 and /network:auto
CVSS Score: 3.5 (LOW)
CWE: CWE-680, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00010.html; https://github.com/FreeRDP/FreeRDP/blob/616af2d5b86dc24c7b3e89870dbcffd841d9a535/ChangeLog#L4; https://github.com/FreeRDP/FreeRDP/pull/6382
CVE: CVE-2020-15120
Published: 2020-07-27
Description: In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's private code. With the default configuration, anybody is allowed to create a new project. An attacker can create a new project and then use it to become authenticated and exploit this flaw. As such, the exposure is similar to an unauthenticated attack, because it is trivial to become authenticated. This is fixed in version 4.1.5.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/spiral-project/ihatemoney/commit/8d77cf5d5646e1d2d8ded13f0660638f57e98471; https://github.com/spiral-project/ihatemoney/security/advisories/GHSA-67j9-c52g-w2q9; https://github.com/spiral-project/ihatemoney/commit/8d77cf5d5646e1d2d8ded13f0660638f57e98471
CVE: CVE-2020-7016
Published: 2020-07-27
Description: Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-185, CWE-400
References: https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786; https://www.elastic.co/community/security/; https://www.oracle.com//security-alerts/cpujul2021.html