CVE-2021-22139CWE-400

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request…

published May 13, 2021

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00999 · 62.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-05-13T17:35Z
EPSS history
Timeline
  • 13 MAY 17:35Z
    Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request…
    cvelistv5