Description
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | kibana | Kibana Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.1 | — |
Advisories 1
- WID-SEC-2023-0415 Kibana: Schwachstelle ermöglicht Darstellen falscher Informationen BSI CERT-Bund (WID) · Feb 16, 2023