Skip to content
OpenAdvisories
Unscored CVE-2020-7017 EUVD-2020-28154GHSA-68q8-gcx9-m4rq

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or c…

Published Jul 27, 2020 · Updated Aug 4, 2024 · Assigned by elastic

Description

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

Affected products

VendorProductAffectedFixed
Elastic Kibana before 6.8.11 and 7.8.1 —

References