CVE-2022-38778

6.5

MEDIUMCVSS v3

Published

February 8, 2023

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.

decode-uri-component

NPMA better decodeURIComponent

< 0.2.1NVD

SamVerschueren/decode-uri-component

GitHubA better decodeURIComponent

< 0.2.1NVD

elastic/kibana

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Your window into all of your data

>= 8.0.0, < 8.6.1, >= 7.0.0, < 7.17.9NVD

Security Advisories

CVE-2022-38778

Description

More on this CVE