CVEvulnerability

CVE-2019-7618

6.5 MEDIUM Published 2019-10-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-22, CWE-538

Description

A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user.

Affected configurations

• elastic kibana 7.3.0 • elastic kibana 7.3.1 • elastic kibana 7.3.2

Related

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory weakness

References