{"id":"CVE-2018-17246","published":"2018-12-20T22:00:00Z","modified":"2024-08-05T10:47:04Z","title":"Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin","vendor":"Elastic","product":"Kibana","tier":"core","eol":null,"affectedVersions":[{"vendor":"Elastic","product":"Kibana","versions":["before 6.4.3 and 5.6.13"]}],"description":{"text":"Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Console plugin in Elastic's Kibana, in versions before 6.4.3 and 5.6.13, contains an arbitrary file inclusion flaw. An attacker with access to the Kibana Console API could send a crafted request that attempts to execute JavaScript, potentially running arbitrary commands with the permissions of the Kibana process on the host.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:15:10Z"},"cvss":null,"epss":{"score":0.84294,"percentile":0.99696,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-11-13","exploitedFirstSeen":"2023-11-13","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-13&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-13"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-14&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-14"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-17&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-17"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-19&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-19"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-20&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-20"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-21&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-23&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-23"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-24&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-24"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-25&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-25"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-27&host_type=src&vulnerability=cve-2018-17246","date":"2023-11-27"}],"evidenceTotal":595,"provenance":"source"},"exploited":true,"otx":{"pulseCount":3,"pulses":[{"name":"invoke-mimikatz.hasthe.technology","url":"https://otx.alienvault.com/pulse/676af0f2663cdd2f25ed9e80","created":"2024-12-24"},{"name":"rogers","url":"https://otx.alienvault.com/pulse/64ab46ec79ba3a3f9f859541","created":"2023-07-09"},{"name":"rogers","url":"https://otx.alienvault.com/pulse/64ab412e96e4858e508978c7","created":"2023-07-09"}],"provenance":"machine"},"cwes":[{"id":"CWE-73","name":"External Control of File Name or Path"}],"references":[{"url":"http://www.securityfocus.com/bid/106285","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594","tags":["x_refsource_MISC"]},{"url":"https://access.redhat.com/errata/RHBA-2018:3743","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.elastic.co/community/security","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-9005","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-9005","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":3,"skipped":0,"earliest":"2019-03-08","earliestUrl":"https://github.com/mpgn/CVE-2018-17246","repos":[{"name":"mpgn/CVE-2018-17246","url":"https://github.com/mpgn/CVE-2018-17246","stars":65,"created":"2019-03-08"},{"name":"Almandev/Sub-folderFetcher","url":"https://github.com/Almandev/Sub-folderFetcher","stars":0,"created":"2025-05-09"},{"name":"ght657/work1-secure-api","url":"https://github.com/ght657/work1-secure-api","stars":0,"created":"2026-10-28"}]},"nuclei":[{"id":"CVE-2018-17246","name":"Kibana - Local File Inclusion","severity":"critical","path":"http/cves/2018/CVE-2018-17246.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17246.yaml"}],"first":{"date":"2019-03-08","source":"PoC-in-GitHub","url":"https://github.com/mpgn/CVE-2018-17246"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2018-12-20","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-17246","provenance":"source"},{"date":"2019-03-08","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/mpgn/CVE-2018-17246","provenance":"source"},{"date":"2023-11-13","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-13&host_type=src&vulnerability=cve-2018-17246","provenance":"source"}],"speed":{"daysToPublicExploit":78,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":61.3,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1081 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9970"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"3 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}