NetSight
medium6.5

CVE-2022-38778

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes th…

Impact

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

Affected products

VendorProductAffected versions
Decode-Uri-Component ProjectDecode-Uri-Component
before 0.2.1
ElasticKibana
from 7.0.0 before 7.17.9
from 8.0.0 before 8.6.1

Weakness classification

References