Approved changes feed: RSS · Atom

cpe:2.3:a:elastic:kibana:7.3.2:*:*:*:*:*:*:*

part: a version: 7.3.2 update: *

VendorElastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037)
ProductKibana (c13ee88f-9cd3-57c3-8d6e-bbf4a9872328)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/elastic/kibana purl2cpe 2026-06-01 10:15:15.205062
pkg:github/elastic/kibana purl2cpe 2026-06-01 10:15:15.205063
pkg:rpm/opensuse/kibana purl2cpe 2026-06-01 10:15:15.205065

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7618 vulnerable 2026-06-03 14:40:41.965087 Details available
A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user.
Published: 2019-10-01T17:52:42.000Z
Updated: 2024-08-04T20:54:28.312Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.