dnr6419/cve-2019-7609Proof-of-concept exploit for Kibana Timelion prototype pollution vulnerability (CVE-2019-7609) enabling remote code execution, with Docker-based lab setup and debugging instructions.
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609
This vulnerability is a Prototype Pollution vulnerability found in Kibana. Exploiting this vulnerability can lead to DoS or RCE attacks.
When installing, please set up port forwarding in the docker-compose.yml file.
$ docker-compose up
https://github.com/hekadan/CVE-2019-7609
https://www.cnblogs.com/anyun/p/8458476.html
