CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Windows.
CVE
CVE-2021-37938
Severity
MEDIUM
CVSS
4.3
EPSS
0.70%
Windows
Original NVD Description
It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to load internal files ending in the .pbf extension. Thanks to Dominic Couture for finding this vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)