Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-24qm-h8fv-cv5c

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

EPSS

Процентиль: 66%
0.0052
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
redhat
почти 8 лет назад

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CVSS3: 6.1
nvd
почти 7 лет назад

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CVSS3: 6.1
debian
почти 7 лет назад

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XS ...

CVSS3: 6.1
fstec
почти 7 лет назад

Уязвимость сервиса визуализации данных Kibana, связанная с непринятием мер по защите структуры веб-страницы (или \Межсайтовая сценарная атака\), позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)

EPSS

Процентиль: 66%
0.0052
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79