Описание
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XS ...
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Уязвимость сервиса визуализации данных Kibana, связанная с непринятием мер по защите структуры веб-страницы (или \Межсайтовая сценарная атака\), позволяющая нарушителю осуществлять межсайтовые сценарные атаки (XSS)
EPSS
6.1 Medium
CVSS3
4.3 Medium
CVSS2