Описание
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.8.16 (исключая)Версия от 7.0.0 (включая) до 7.13.0 (исключая)
Одно из
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.00239
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-601
CWE-601
Связанные уязвимости
CVSS3: 4.3
redhat
больше 4 лет назад
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website.
CVSS3: 6.1
debian
около 3 лет назад
An open redirect flaw was found in Kibana versions before 7.13.0 and 6 ...
CVSS3: 6.1
github
около 3 лет назад
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website.
EPSS
Процентиль: 47%
0.00239
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-601
CWE-601