CVE-2018-17246 PoC — Elasticsearch Kibana Console插件安全漏洞

Source

https://github.com/Almandev/Sub-folderFetcher

Associated Vulnerability

Title: Elasticsearch Kibana Console插件安全漏洞 (CVE-2018-17246)
Description:Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

Description

A script to download specific Vulhub repository folder (kibana/CVE-2018-17246) from GitHub.

Readme

# Sub-folder Fetcher 🐣

A script to download specific Vulhub repository folder (kibana/CVE-2018-17246) from GitHub.

## 🚀 Requirements

- `curl`
- `unzip`

## 🛠️ Usage


```bash
chmod +x subfetcher.sh
./subfetcher.sh
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →