Unrated severityCISA KEVNVD Advisory· Published Mar 25, 2019· Updated Oct 21, 2025
CVE-2019-7609
CVE-2019-7609
Description
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- access.redhat.com/errata/RHBA-2019:2824mitrevendor-advisory
- access.redhat.com/errata/RHSA-2019:2860mitrevendor-advisory
- packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.htmlmitre
- discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077mitre
- www.elastic.co/community/securitymitre
News mentions
0No linked articles in our index yet.