PT-2024-5757 · Unknown · Kraken Stress Testing Toolkit
Published
2024-07-31
·
Updated
2024-07-31
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Kraken Stress Testing Toolkit (affected versions not specified)
Description
The issue is related to the lack of protection for the SQL query structure in the Kraken Stress Testing Toolkit, a tool for load testing SIEM systems. This can be exploited by a remote attacker to execute arbitrary code by injecting specially crafted data into the
ID parameter of a playbook.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Kraken Stress Testing Toolkit