CVE-2018-17246 PoC — Elasticsearch Kibana Console插件安全漏洞

Source

https://github.com/Almandev/Sub-folderFetcher

Associated Vulnerability

Title:Elasticsearch Kibana Console插件安全漏洞 (CVE-2018-17246)
Description:Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Description

A script to download specific Vulhub repository folder (kibana/CVE-2018-17246) from GitHub.

Readme

# Sub-folder Fetcher 🐣

A script to download specific Vulhub repository folder (kibana/CVE-2018-17246) from GitHub.

## 🚀 Requirements

- `curl`
- `unzip`

## 🛠️ Usage


```bash
chmod +x subfetcher.sh
./subfetcher.sh
```

File Snapshot


 [4.0K]  /data/pocs/288af9b8e08f10c87f418dd2aec7cfa27923eee0
├── [ 232]  README.md
└── [1.3K]  subfetcher.sh

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!