Elastic

Logstash X-pack

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.2%
  • Veröffentlicht 19.09.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 04:06:06

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage_ml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to obtai...

  • EPSS 0.27%
  • Veröffentlicht 19.09.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 04:06:06

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job i...