ZeroDay Findings
Sign inSign up

Findings

CVE-2019-7609

Kibana Arbitrary Code Execution

Published Mar 25, 2019 · updated Jun 16, 2026 · elastic kibana

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 25, 2019 · Catalog

    Detected

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

  2. Jan 10, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jul 10, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Required action

Apply updates per vendor instructions.

CISA due date Jul 10, 2022

Affected

  • cpe elastic/kibanaversion unspecified
  • cpe redhat/openshift container platform3.11
  • cpe redhat/openshift container platform4.1
  • vendor Elastic Kibanaversion unspecified

Sources

  • CISA KEVCVE-2019-7609

    Kibana contain an arbitrary code execution flaw in the Timelion visualizer.

    cisa.gov
  • CVE.orgCVE-2019-7609

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-7609

    30-day exploitation probability 95.3%

    first.org
  • Metasploit Modulesexploit_linux/http/kibana_timelion_prototype_pollution_rce

    Public module reference (manual). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2019-7609

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing ar

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References

CVE-2019-7609 · ZeroDay Findings