Threats tagged 'ghsa-vvh2-cggg-r4p9'

A path traversal vulnerability (CWE-22) in the Kibana Fleet feature allows a low-privileged user with write access to Fleet agent policies to indirectly cause deletion of restricted resources. Exploitation requires an administrator to perform an action on the affected interface, potentially leading to deletion of Kibana spaces and other organizational assets that the low-privileged user cannot delete directly.