Kibana Timelion Prototype Pollution RCE
Title source: metasploitExploitation Summary
CVE-2019-7609 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 10, 2022.
EIP tracks 17 public exploits from researchers including LandGrey, jas502n, mpgn, including a Metasploit module exploits/linux/http/kibana_timelion_prototype_pollution_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 5.6.15 and < 6.6.1. It leverages the Timelion API to inject malicious payloads, achieving RCE via Node.js child_process execution.
Description
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
Exploits (17)
This PoC exploits CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 5.6.15 and < 6.6.1. It leverages the Timelion API to inject malicious payloads, achieving RCE via Node.js child_process execution.
This PoC demonstrates a remote code execution (RCE) vulnerability in Kibana versions prior to 6.6.0 by exploiting the Timelion and Canvas features to inject malicious commands via prototype pollution.
This repository contains a working proof-of-concept exploit for CVE-2019-7609, a prototype pollution vulnerability in Kibana's Timelion visualizer. The exploit leverages JavaScript payloads to achieve remote code execution (RCE) by manipulating the prototype chain and executing arbitrary commands via Node.js child_process.
This repository provides a working proof-of-concept exploit for CVE-2019-7609, a remote code execution vulnerability in Kibana's Timelion visualizer. The exploit leverages prototype pollution to execute arbitrary commands via a reverse shell.
This is a Python-based exploit for CVE-2019-7609, targeting Kibana versions before 5.6.15 and 6.6.0. It achieves RCE by injecting a reverse shell payload via the Timelion visualizer API.
This is a Python-based exploit for CVE-2019-7609, targeting Kibana versions before 6.6.1. It achieves remote code execution (RCE) by exploiting a vulnerability in the Timelion API to inject a reverse shell payload.
This repository provides a writeup and setup instructions for exploiting CVE-2019-7609, a prototype pollution vulnerability in Kibana's Timelion visualizer that can lead to RCE or DoS. It includes references to external sources and debugging setup but lacks actual exploit code.
This PoC exploits CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 5.6.15 and < 6.6.1. It leverages the Timelion API to inject malicious payloads, achieving RCE via prototype pollution and command execution.
This repository contains a functional Python exploit for CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 6.6.1. The exploit leverages the Timelion API to inject malicious payloads, achieving RCE via a reverse shell.
This repository contains a functional Python exploit for CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 6.6.1. The exploit leverages the Timelion API to inject malicious payloads via prototype pollution, leading to arbitrary command execution.
This repository contains a functional Python exploit for CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 5.6.15 and < 6.6.1. The exploit leverages the Timelion API to inject malicious payloads, achieving RCE via prototype pollution and environment variable manipulation.
This repository contains a working proof-of-concept exploit for CVE-2019-7609, demonstrating prototype pollution in Kibana's Timelion visualizer leading to arbitrary code execution. The exploit leverages Node.js child process spawning with manipulated environment variables to achieve RCE.
This repository contains a functional Python 3 exploit for CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 5.6.15 and < 6.6.1. The exploit leverages the Timelion API to execute arbitrary commands via prototype pollution, resulting in a reverse shell.
This repository contains a Python 3-compatible exploit for CVE-2019-7609, a remote code execution vulnerability in Kibana versions < 6.6.1. The exploit leverages the Timelion API to inject malicious payloads and achieve reverse shell access.
This repository provides a Docker lab setup and payloads for exploiting CVE-2019-7609, a prototype pollution vulnerability in Kibana that leads to remote code execution via the Timelion visualizer.
This repository contains a functional Python3 exploit for CVE-2019-7609, a prototype pollution vulnerability in Kibana < 6.6.1 that allows remote code execution. The exploit includes version detection, vulnerability verification, and an optional reverse shell payload.
This Metasploit module exploits a prototype pollution vulnerability in Kibana's Timelion visualizer (CVE-2019-7609) to achieve remote code execution. It injects malicious payloads via the Timelion API, leveraging environment variable manipulation to execute arbitrary commands.
Nuclei Templates (1)
http.title:"kibana"
title="kibana"
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H