cve/2019/CVE-2019-7609.md

CVE-2019-7609

Description

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

POC

Reference

• http://packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.html
• https://www.elastic.co/community/security

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AfvanMoopen/tryhackme-
• https://github.com/Aledangelo/THM_Kiba_Writeup
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/CnHack3r/Penetration_PoC
• https://github.com/Correia-jpv/fucking-awesome-web-security
• https://github.com/Cr4ckC4t/cve-2019-7609
• https://github.com/EchoGin404/-
• https://github.com/EchoGin404/gongkaishouji
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/GhostTroops/TOP
• https://github.com/KTH-LangSec/server-side-prototype-pollution
• https://github.com/LandGrey/CVE-2019-7609
• https://github.com/Mehedi-Babu/web_security_cyber
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Mrnmap/KibanaRce
• https://github.com/OliveiraaX/CVE-2019-7609-KibanaRCE
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/Oxc4ndl3/Web-Pentest
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/Tyro-Shan/gongkaishouji
• https://github.com/YIXINSHUWU/Penetration_Testing_POC
• https://github.com/ZTK-009/Penetration_PoC
• https://github.com/alphaSeclab/sec-daily-2019
• https://github.com/alphaSeclab/sec-daily-2020
• https://github.com/apachecn-archive/Middleware-Vulnerability-detection
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/brettgervasoni/pollute_api
• https://github.com/catsecorg/CatSec-TryHackMe-WriteUps
• https://github.com/chhu0830/ctf
• https://github.com/cranelab/webapp-tech
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/dli408097/WebSecurity
• https://github.com/dnr6419/CVE-2019-7609
• https://github.com/ducducuc111/Awesome-web-security
• https://github.com/elinakrmova/awesome-web-security
• https://github.com/gabyfulchic/DojoYesWeHackCTF
• https://github.com/getdrive/PoC
• https://github.com/hasee2018/Penetration_Testing_POC
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/hekadan/CVE-2019-7609
• https://github.com/hktalent/TOP
• https://github.com/hktalent/bug-bounty
• https://github.com/huike007/penetration_poc
• https://github.com/huike007/poc
• https://github.com/izj007/wechat
• https://github.com/jas502n/kibana-RCE
• https://github.com/jiangsir404/POC-S
• https://github.com/kimmobrunfeldt/lodash-merge-pollution-example
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/lnick2023/nicenice
• https://github.com/lovechinacoco/https-github.com-mai-lang-chai-Middleware-Vulnerability-detection
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/mishmashclone/qazbnm456-awesome-web-security
• https://github.com/moldovanzsombor/KibanaVersionScanner
• https://github.com/mpgn/CVE-2019-7609
• https://github.com/password520/Penetration_PoC
• https://github.com/paulveillard/cybersecurity-web-security
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/qazbnm456/awesome-web-security
• https://github.com/rhbb/CVE-2019-7609
• https://github.com/seeu-inspace/easyg
• https://github.com/sobinge/nuclei-templates
• https://github.com/tdtc7/qps
• https://github.com/testermas/tryhackme
• https://github.com/whoami0622/CVE-2019-7610
• https://github.com/whoami13apt/files2
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/wolf1892/CVE-2019-7609
• https://github.com/woods-sega/woodswiki
• https://github.com/xbl3/awesome-cve-poc_qazbnm456
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/yaguine/kiba
• https://github.com/yedada-wei/-
• https://github.com/yedada-wei/gongkaishouji