| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 7.10.2, < 7.14.1 | 7.14.1 |
It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free