Skip to content
OpenAdvisories
Unscored CVE-2022-23707 EUVD-2022-28646GHSA-xj4h-2rjf-hh84

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index p…

Published Feb 11, 2022 · Updated Aug 3, 2024 · Assigned by elastic

Description

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users

Affected products

VendorProductAffectedFixed
Elastic Kibana 7.5.1 through 7.16.3 —

References