exploit/linux/http/kibana_upgrade_assistant_telemetry_rce

PoC

Kibana Upgrade Assistant Telemetry Collector Prototype Pollution

view exploit source metasploittype exploitpublished 2020-04-17catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-7012UShigh8.8Exploit
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana inde…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan