I have been trying to use this PoC code for the Arbitrary File inclusion vulnerability in Kibana Sense console.

The request:


is returning the follow error:

{"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"request [/api/console/api_server] contains unrecognized parameter: [sense_version]"}],"type":"illegal_argument_exception","reason":"request [/api/console/api_server] contains unrecognized parameter: [sense_version]"},"status":400}

I have received this error against multiple instances, so I think there needs to be some configuration change performed before using this request.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.