# Need info regarding Kibana Timelion Remote Code Execution issue (ESA-2019-02)

**URL:** <https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [March 30, 2019, 12:42am UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619 "2019-03-30T00:42:36Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![fragatina](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@fragatina](https://discuss.elastic.co/u/fragatina)\
**Post date:** [March 30, 2019, 12:42am UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/1 "2019-03-30T00:42:37Z")

</div>

Hi,

I'm evaluating the Kibana Timelion Remote Code Execution issue (ESA-2019-02) CVE from:

> [@Elastic Stack 6.6.1 and 5.6.15 security update](https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077):
>
> Kibana XSS issue (ESA-2019-01) Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. Affected Versions Kibana versions before 5.6.15 and 6.6.1 Solutions and Mitigations: Users should upgrade to Kibana version 6.6.1 or 5.6.15 CVE ID: CVE-2019-7608 Kibana Timelion Remote Code Execution issue (ESA-2019-02) Kibana versions before …

I'd really appreciate if somebody could point out to the GitHub patch for this fix.

Thanks.

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [April 1, 2019, 3:15pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/2 "2019-04-01T15:15:43Z")

</div>

The PR for fixing this is here: [https://github.com/elastic/kibana/pull/28834](https://github.com/elastic/kibana/pull/28834)

---

<div class="post-metadata">

**Author:** ![fragatina](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@fragatina](https://discuss.elastic.co/u/fragatina)\
**Post date:** [April 1, 2019, 4:42pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/3 "2019-04-01T16:42:57Z")

</div>

Thanks @nickpeihl for your support on this.  
Just to confirm, from what you say, ESA-2019-01 and ESA-2019-02 are both the same pull 28834?  
Thanks

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [April 1, 2019, 5:14pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/4 "2019-04-01T17:14:42Z")

</div>

@fragatina It appears to be the same PR for both. But you can email [security@elastic.co](mailto:security@elastic.co) for more info.

---

<div class="post-metadata">

**Author:** ![fragatina](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@fragatina](https://discuss.elastic.co/u/fragatina)\
**Post date:** [April 1, 2019, 9:20pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/5 "2019-04-01T21:20:27Z")

</div>

Thanks @nikpeihl for your help on this.

---

<div class="post-metadata">

**Author:** ![Harsha\_Sri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harsha_sri/32/43501_2.png) [@Harsha\_Sri](https://discuss.elastic.co/u/Harsha_Sri)\
**Post date:** [April 4, 2019, 1:06pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/6 "2019-04-04T13:06:17Z")

</div>

Hi, I am looking for the patch that's fixing the ESA-2019-01 XSSvulnerability. So Can we confirm that both ESA-2019-01 and ESA-2019-02 have the same PR's and Patches. Thanks in advance for the help

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2019, 1:06pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619/7 "2019-05-02T13:06:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.