Critical severity10.0CISA KEVNVD Advisory· Published Mar 25, 2019· Updated Jun 17, 2026
CVE-2019-7609
CVE-2019-7609
Description
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHBA-2019:2824nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2019:2860nvdThird Party Advisory
- discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077nvdVendor Advisory
- www.elastic.co/community/securitynvdBroken LinkVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.