---

CVE-2021-22139 - log back

CVE-2021-22139 edited at 27 Apr 2021 19:34:33
Severity	- Unknown + Medium
Remote	- Unknown + Remote
Type	- Unknown + Denial of service
Description	+ A denial of service vulnerability was found in the Kibana webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users. The issue is fixed in Kibana version 7.12.1.
References	+ https://discuss.elastic.co/t/7-12-1-security-update/271433

CVE-2021-22139 created at 27 Apr 2021 19:33:20
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes