Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-22141 EUVD-2021-9292GHSA-whx6-754g-3x5v

An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could…

Published Nov 18, 2022 · Updated Apr 29, 2025 · Assigned by elastic

Vendor: Elastic Product: Kibana

Description

An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website.

Affected products

VendorProductAffectedFixed
Elastic Kibana All versions of Kibana before 7.13.0 and 6.8.16. —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE OpenStack Cloud Crowbar 9 crowbar-openstack 6.0+git.1630614261.26948f746-3.37.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 influxdb 1.3.8-4.6.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 kibana 4.6.6-4.12.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-cinder 13.0.10~dev23-3.31.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-ec2-api 7.1.1~dev6-3.3.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-heat-gbp 12.0.1~dev4-3.6.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-heat-templates 0.0.0+git.1628179051.7d761bff-3.12.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-horizon-plugin-gbp-ui 12.0.1~dev5-3.6.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-keystone 14.2.1~dev7-3.25.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-neutron-gbp 14.0.1~dev19-3.28.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 openstack-nova 18.3.1~dev91-3.40.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 python-eventlet 0.20.0-8.3.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 rubygem-puma 2.16.0-4.15.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 9 rubygem-redcarpet 3.2.3-4.3.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-deployment +3 8.20211112-1.38.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud Crowbar 8 kibana 4.6.6-3.12.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud Crowbar 8 openstack-keystone +1 12.0.4~dev11-5.36.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud Crowbar 8 openstack-monasca-notification 1.10.2~dev4-3.9.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud 9 ardana-ansible 9.0+git.1628097238.f6cbb0e-3.29.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 ardana-monasca 9.0+git.1627995376.30bdf85-3.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 influxdb 1.3.8-4.6.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 kibana 4.6.6-4.12.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-cinder 13.0.10~dev23-3.31.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-ec2-api 7.1.1~dev6-3.3.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-heat-gbp 12.0.1~dev4-3.6.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-heat-templates 0.0.0+git.1628179051.7d761bff-3.12.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-horizon-plugin-gbp-ui 12.0.1~dev5-3.6.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-keystone 14.2.1~dev7-3.25.2 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-neutron-gbp 14.0.1~dev19-3.28.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 openstack-nova 18.3.1~dev91-3.40.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 python-eventlet 0.20.0-8.3.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-barbican 7.0.1~dev24-3.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-cinder 13.0.10~dev23-3.28.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-designate 7.0.2~dev2-3.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-glance 17.0.1~dev30-3.23.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-heat 11.0.4~dev4-3.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-horizon 14.1.1~dev11-4.29.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-ironic 11.1.5~dev17-4.23.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-keystone 14.2.1~dev7-3.26.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-magnum 7.2.1~dev1-4.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-manila 7.4.2~dev60-3.31.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-monasca 2.7.1~dev10-3.23.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-monasca-ceilometer 1.8.2~dev3-3.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-neutron 13.0.8~dev164-6.29.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-nova 18.3.1~dev91-3.29.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-octavia 3.2.3~dev7-4.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-sahara 9.0.2~dev15-3.25.1 SUSE-SU-2021:3729-1
SUSE OpenStack Cloud 9 venv-openstack-swift 2.19.2~dev48-2.20.1 SUSE-SU-2021:3729-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE OpenStack Cloud 8 documentation-suse-openstack-cloud-user +8 8.20211112-1.38.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud 8 kibana 4.6.6-3.12.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud 8 openstack-keystone +1 12.0.4~dev11-5.36.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud 8 openstack-monasca-notification 1.10.2~dev4-3.9.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud 8 venv-openstack-keystone 12.0.4~dev11-11.45.1 SUSE-SU-2022:1654-1
SUSE OpenStack Cloud 8 venv-openstack-monasca 2.2.2~dev1-11.45.1 SUSE-SU-2022:1654-1
SUSE HPE Helion OpenStack 8 documentation-hpe-helion-openstack-user +5 8.20211112-1.38.1 SUSE-SU-2022:1654-1
SUSE HPE Helion OpenStack 8 kibana 4.6.6-3.12.1 SUSE-SU-2022:1654-1
SUSE HPE Helion OpenStack 8 openstack-keystone +1 12.0.4~dev11-5.36.1 SUSE-SU-2022:1654-1
SUSE HPE Helion OpenStack 8 openstack-monasca-notification 1.10.2~dev4-3.9.1 SUSE-SU-2022:1654-1
SUSE HPE Helion OpenStack 8 venv-openstack-keystone 12.0.4~dev11-11.45.1 SUSE-SU-2022:1654-1
SUSE HPE Helion OpenStack 8 venv-openstack-monasca 2.2.2~dev1-11.45.1 SUSE-SU-2022:1654-1

Advisories 2

References