{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T19:52:53.412","vulnerabilities":[{"cve":{"id":"CVE-2019-7618","sourceIdentifier":"security@elastic.co","published":"2019-10-01T18:15:13.987","lastModified":"2026-06-17T02:40:46.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to read arbitrary files from the local filesystem of the Kibana instance running Code with the permission of the Kibana system user."},{"lang":"es","value":"Se encontró un fallo de divulgación de archivo local en Elastic Code versiones 7.3.0, 7.3.1 y 7.3.2. Si un repositorio de código malicioso es importado hacia Code, es posible leer archivos arbitrarios del sistema de archivos local de la instancia Kibana ejecutando Code con el permiso del usuario system de Kibana."}],"affected":[{"source":"security@elastic.co","affectedData":[{"vendor":"Elastic","product":"Elastic Code","versions":[{"version":"7.3.0, 7.3.1, and 7.3.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"security@elastic.co","type":"Secondary","description":[{"lang":"en","value":"CWE-538"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elastic:kibana:7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2F9EBE3-54B9-410E-9B22-6A4671735765"},{"vulnerable":true,"criteria":"cpe:2.3:a:elastic:kibana:7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F08B1343-B6DB-435B-8913-9EBAC66B5D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:elastic:kibana:7.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D73DD3D7-F0E2-4BA3-8BD9-637E872CA121"}]}]}],"references":[{"url":"https://discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831","source":"security@elastic.co","tags":["Release Notes","Vendor Advisory"]},{"url":"https://staging-website.elastic.co/community/security","source":"security@elastic.co","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://staging-website.elastic.co/community/security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]}]}}]}