PT-2018-16215 · Elastic · Kibana
CVE-2018-3821
·
Publicado
2018-03-30
·
Atualizado
2023-03-03
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Kibana versions after 5.1.1 and before 5.6.7
Kibana versions before 6.1.3
Description
A cross-site scripting (XSS) issue was found in the tag cloud visualization, potentially allowing an attacker to obtain sensitive information or perform actions on behalf of other users.
Recommendations
For versions after 5.1.1 and before 5.6.7, update to version 5.6.7 or later.
For versions before 6.1.3, update to version 6.1.3 or later.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Kibana