Security Advisory

CVE-2020-7016

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-27 18:00:15
Last updated 2024-08-04 09:18:03
Assigner elastic
State PUBLISHED

Description

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.