CVE-2015-4093

Опубликовано: 09 июн. 2015

Источник: redhat

CVSS3: 6.1

CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools	kibana	Not affected
Red Hat OpenShift Enterprise 3.1	kibana	Not affected
Red Hat OpenStack Platform 8 (Liberty) Operational Tools	kibana	Not affected
Red Hat OpenStack Platform 9 (Mitaka) Operational Tools	kibana	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=1350727kibana: Cross-site scripting vulnerability

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2015-4093

nvd

около 11 лет назад

Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2015-4093

debian

около 11 лет назад

Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x b ...

GHSA-544j-mxpj-g427

github

больше 4 лет назад

Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1 Medium

CVSS3

4.3 Medium

CVSS2