CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-38778
https://notcve.org/view.php?id=CVE-2022-38778
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process. • https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661 https://www.elastic.co/community/security • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2022-38900 – decode-uri-component <= 0.2.1 - Denial of Service
https://notcve.org/view.php?id=CVE-2022-38900
decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. decode-uri-component 0.2.0 es vulnerable a una validación de entrada incorrecta que provoca DoS. A flaw was found in decode-uri-component. This issue occurs due to a specially crafted input, resulting in a denial of service. The decode-uri-component is vulnerable to Denial of Service due to improper input validation in versions up to, and including, 0.2.1 when certain search strings are parsed by the decodeUriComponent. • https://github.com/SamVerschueren/decode-uri-component/issues/5 https://github.com/sindresorhus/query-string/issues/345 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QABOUA2I542UTANVZIVFKWMRYVHLV32D https://lists.fedoraproject.org/archives/list/package • CWE-20: Improper Input Validation CWE-400: Uncontrolled Resource Consumption •