Description
Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | before 6.0.1 and 5.6.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 9 | cassandra | 3.11.10-3.3.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1616146717.a89ae0f4e-3.34.4 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | grafana | 6.7.4-3.23.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | kibana | 4.6.6-4.9.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-dashboard | 14.1.1~dev11-3.24.6 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.5~dev17-3.25.5 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.8~dev164-3.37.4 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 12.0.1~dev29-3.25.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.3.1~dev82-3.37.6 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-Django1 | 1.11.29-3.25.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-py | 1.5.4-3.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-pysaml2 | 4.5.0-4.6.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-xmlschema | 1.0.18-1.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-activerecord-session_store | 0.1.2-4.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud Crowbar 8 | cassandra | 3.11.10-5.3.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1622489449.a8e60e238-3.50.4 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1616001417.67fd9c2a1-4.52.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment +3 | 8.20210512-1.32.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | kibana | 4.6.6-3.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova +1 | 16.1.9~dev92-3.48.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.25.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-eventlet | 0.20.0-6.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-py | 1.4.34-3.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-pysaml2 | 4.0.2-5.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-xmlschema | 1.0.18-1.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-activerecord-session_store | 0.1.2-3.3.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 9 | ardana-neutron | 9.0+git.1615223676.777f0b3-3.25.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | ardana-swift | 9.0+git.1618235096.90974ed-3.10.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | cassandra | 3.11.10-3.3.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | grafana | 6.7.4-3.23.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | kibana | 4.6.6-4.9.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | openstack-dashboard | 14.1.1~dev11-3.24.6 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.5~dev17-3.25.5 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.8~dev164-3.37.4 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 12.0.1~dev29-3.25.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | openstack-nova | 18.3.1~dev82-3.37.6 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | python-Django1 | 1.11.29-3.25.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | python-py | 1.5.4-3.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | python-pysaml2 | 4.5.0-4.6.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | python-xmlschema | 1.0.18-1.3.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.23.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev20-3.26.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.23.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.21.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.23.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.27.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev17-4.21.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev4-3.24.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.23.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.29.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.21.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.23.2 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev164-6.27.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev82-3.27.3 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.23.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.23.1 | SUSE-SU-2021:1962-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.18.1 | SUSE-SU-2021:1962-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | cassandra | 3.11.10-5.3.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user +8 | 8.20210512-1.32.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | kibana | 4.6.6-3.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | openstack-nova +1 | 16.1.9~dev92-3.48.5 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.25.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-eventlet | 0.20.0-6.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-py | 1.4.34-3.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-pysaml2 | 4.0.2-5.9.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | python-xmlschema | 1.0.18-1.3.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev6-14.36.6 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 | SUSE-SU-2021:2554-1 |
| SUSE OpenStack Cloud 7 | crowbar-openstack | 4.0+git.1616146720.44daffca0-9.81.2 | SUSE-SU-2021:1963-1 |
| SUSE OpenStack Cloud 7 | grafana | 6.7.4-1.24.2 | SUSE-SU-2021:1963-1 |
| SUSE OpenStack Cloud 7 | kibana | 4.6.6-9.2 | SUSE-SU-2021:1963-1 |
| SUSE OpenStack Cloud 7 | monasca-installer | 20180608_12.47-16.2 | SUSE-SU-2021:1963-1 |
| SUSE OpenStack Cloud 7 | python-Django | 1.8.19-3.29.1 | SUSE-SU-2021:1963-1 |
| SUSE OpenStack Cloud 7 | python-py | 1.8.1-11.16.2 | SUSE-SU-2021:1963-1 |
| SUSE OpenStack Cloud 7 | rubygem-activerecord-session_store | 0.1.2-3.4.2 | SUSE-SU-2021:1963-1 |
| SUSE HPE Helion OpenStack 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | cassandra | 3.11.10-5.3.5 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user +5 | 8.20210512-1.32.5 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.18.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | kibana | 4.6.6-3.9.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | openstack-nova +1 | 16.1.9~dev92-3.48.5 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.25.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-elementpath | 1.3.1-1.3.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-eventlet | 0.20.0-6.3.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-py | 1.4.34-3.3.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-pysaml2 | 4.0.2-5.9.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | python-xmlschema | 1.0.18-1.3.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev6-14.36.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 | SUSE-SU-2021:2554-1 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 | SUSE-SU-2021:2554-1 |
Advisories 3
- SUSE-SU-2021:2554-1 Security update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:1962-1 Security update for ardana-neutron, ardana-swift, cassandra, crowbar-openstack, grafana, kibana, openstack-dashboard, openstack-ironic, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, python-py, python-pysaml2, python-xmlschema, rubygem-activerecord-session_store, venv-openstack-keystone SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:1963-1 Security update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store SUSE / openSUSE Security Updates · Feb 4, 2026