TI-2020-05665 CVE-2020-7017 · GHSA-68q8-gcx9-m4rq
Cross-site scripting in Elastic Kibana
Priority LOW 32
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw.
3 records
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw.
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.
Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.