Bug 2172350 (CVE-2022-38778) - CVE-2022-38778 kibana: Kibana authenticated Denial of Service issue (ESA-2023-02)
Summary: CVE-2022-38778 kibana: Kibana authenticated Denial of Service issue (ESA-2023...
Keywords:
Status: NEW
Alias: CVE-2022-38778
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2176290 2176291 2176292
Blocks: 2169677
TreeView+ depends on / blocked
 
Reported: 2023-02-22 04:43 UTC by Avinash Hanwate
Modified: 2023-07-21 22:26 UTC (History)
16 users (show)

Fixed In Version: kibana 7.17.9 and 8.6.1
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in one of Kibana’s third-party dependencies. This issue could allow an authenticated user to perform a request that crashes the Kibana server process.
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Avinash Hanwate 2023-02-22 04:43:46 UTC
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661

Comment 1 Anten Skrabec 2023-03-07 22:08:51 UTC
Created puppet-kibana3 tracking bugs for this issue:

Affects: openstack-rdo [bug 2176290]


Note You need to log in before you can comment on or make changes to this bug.