high8.7
CVE-2024-12556
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.
Impact
Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 8.16.1 before 8.16.4 from 8.17.0 before 8.17.2 |