CRITICAL🇵🇱 Wersja polska

CVE-2019-11076

CVSS 9.8v3.0pub. 2019-04-23upd. 2024-11-21

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cribl

    APP
    Cribl
    1.5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-56747HIGH8.7PL ✓same vendor

RCE poprzez code injection w kompilatorze JSON Pointer w Cribl Stream

CVE-2026-56748HIGH8.7PL ✓same vendor

RCE przez symbolic link w funkcji Pack Git import w Cribl Stream