Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-7609

Description

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

POC

Reference

- http://packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.html

- https://www.elastic.co/community/security

Github

- https://github.com/0xT11/CVE-POC

- https://github.com/20142995/nuclei-templates

- https://github.com/20142995/sectool

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ARPSyndicate/kenzer-templates

- https://github.com/AfvanMoopen/tryhackme-

- https://github.com/Akshay15-png/CVE-2019-7609

- https://github.com/Aledangelo/THM_Kiba_Writeup

- https://github.com/AmirF00/ProtoType-Pollution

- https://github.com/Bhanunamikaze/VaktScan

- https://github.com/CVEDB/awesome-cve-repo

- https://github.com/CVEDB/top

- https://github.com/CnHack3r/Penetration_PoC

- https://github.com/Coldplay1517/Middleware-Vulnerability-detection-master

- https://github.com/Correia-jpv/fucking-awesome-web-security

- https://github.com/Cr4ckC4t/cve-2019-7609

- https://github.com/EchoGin404/-

- https://github.com/EchoGin404/gongkaishouji

- https://github.com/Elsfa7-110/kenzer-templates

- https://github.com/Esther7171/THM-Walkthroughs

- https://github.com/Esther7171/TryHackMe-Walkthroughs

- https://github.com/GhostTroops/TOP

- https://github.com/KTH-LangSec/server-side-prototype-pollution

- https://github.com/KarimLedesmaHaron/THM-Tutoriales

- https://github.com/LandGrey/CVE-2019-7609

- https://github.com/Mehedi-Babu/web_security_cyber

- https://github.com/Mr-xn/Penetration_Testing_POC

- https://github.com/Mrnmap/KibanaRce

- https://github.com/OliveiraaX/CVE-2019-7609-KibanaRCE

- https://github.com/Ostorlab/KEV

- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

- https://github.com/Oxc4ndl3/Web-Pentest

- https://github.com/PwnFunction/Next.js-Flat-Prototype-Pollution

- https://github.com/SexyBeast233/SecBooks

- https://github.com/Threekiii/Awesome-POC

- https://github.com/Threekiii/Vulhub-Reproduce

- https://github.com/TrojanAZhen/Self_Back

- https://github.com/Tyro-Shan/gongkaishouji

- https://github.com/XiaomingX/awesome-poc-for-red-team

- https://github.com/YIXINSHUWU/Penetration_Testing_POC

- https://github.com/YusukeJustinNakajima/BugBounty-Resources-For-Japanese

- https://github.com/ZTK-009/Penetration_PoC

- https://github.com/alphaSeclab/sec-daily-2019

- https://github.com/alphaSeclab/sec-daily-2020

- https://github.com/apachecn-archive/Middleware-Vulnerability-detection

- https://github.com/aw-junaid/Web-Security

- https://github.com/bakery312/Vulhub-Reproduce

- https://github.com/brettgervasoni/pollute_api

- https://github.com/brunsu/woodswiki

- https://github.com/catsecorg/CatSec-TryHackMe-WriteUps

- https://github.com/chhu0830/ctf

- https://github.com/cranelab/webapp-tech

- https://github.com/d4n-sec/d4n-sec.github.io

- https://github.com/developer3000S/PoC-in-GitHub

- https://github.com/dli408097/WebSecurity

- https://github.com/dnr6419/CVE-2019-7609

- https://github.com/ducducuc111/Awesome-web-security

- https://github.com/elinakrmova/awesome-web-security

- https://github.com/gabyfulchic/DojoYesWeHackCTF

- https://github.com/getdrive/PoC

- https://github.com/hasee2018/Penetration_Testing_POC

- https://github.com/hectorgie/PoC-in-GitHub

- https://github.com/hekadan/CVE-2019-7609

- https://github.com/hktalent/TOP

- https://github.com/hktalent/bug-bounty

- https://github.com/huike007/penetration_poc

- https://github.com/huike007/poc

- https://github.com/huisetiankong478/penetration_poc

- https://github.com/huisetiankong478/poc

- https://github.com/izj007/wechat

- https://github.com/jas502n/kibana-RCE

- https://github.com/jiangsir404/POC-S

- https://github.com/kimmobrunfeldt/lodash-merge-pollution-example

- https://github.com/lions2012/Penetration_Testing_POC

- https://github.com/lnick2023/nicenice

- https://github.com/lovechinacoco/https-github.com-mai-lang-chai-Middleware-Vulnerability-detection

- https://github.com/merlinepedra/nuclei-templates

- https://github.com/merlinepedra25/nuclei-templates

- https://github.com/mishmashclone/qazbnm456-awesome-web-security

- https://github.com/moldovanzsombor/KibanaVersionScanner

- https://github.com/mpgn/CVE-2019-7609

- https://github.com/n0-traces/cve_monitor

- https://github.com/password520/Penetration_PoC

- https://github.com/paulveillard/cybersecurity-web-security

- https://github.com/pentration/gongkaishouji

- https://github.com/qazbnm456/awesome-cve-poc

- https://github.com/qazbnm456/awesome-web-security

- https://github.com/rhbb/CVE-2019-7609

- https://github.com/seeu-inspace/easyg

- https://github.com/sobinge/nuclei-templates

- https://github.com/tdtc7/qps

- https://github.com/testermas/tryhackme

- https://github.com/uttambodara/Awesome-Hacking-Learning-Path

- https://github.com/w3workerz/THM-Walkthroughs

- https://github.com/whoami0622/CVE-2019-7610

- https://github.com/whoami13apt/files2

- https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-

- https://github.com/wolf1892/CVE-2019-7609

- https://github.com/woods-sega/woodswiki

- https://github.com/xbl3/awesome-cve-poc_qazbnm456

- https://github.com/xuetusummer/Penetration_Testing_POC

- https://github.com/yaguine/kiba

- https://github.com/yedada-wei/-

- https://github.com/yedada-wei/gongkaishouji