Описание
An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users
A Cross-Site Scripting (XSS) vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permission to create index patterns can inject malicious javascript into the index pattern, which could execute against other users.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Logging Subsystem for Red Hat OpenShift | openshift-logging/elasticsearch-rhel8-operator | Will not fix | ||
| Logging Subsystem for Red Hat OpenShift | openshift-logging/kibana6-rhel8 | Will not fix | ||
| Red Hat JBoss Fuse 6 | Kibana | Out of support scope | ||
| Red Hat JBoss Fuse Service Works 6 | Kibana | Out of support scope | ||
| Red Hat OpenShift Container Platform 3.11 | kibana | Will not fix | ||
| Red Hat OpenShift Container Platform 3.11 | openshift3/ose-logging-kibana5 | Will not fix | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-elasticsearch-operator | Will not fix | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-logging-kibana6 | Will not fix | ||
| Red Hat OpenStack Platform 13 (Queens) | puppet-kibana3 | Out of support scope | ||
| Red Hat OpenStack Platform 16.1 | puppet-kibana3 | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
8.1 High
CVSS3
Связанные уязвимости
An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users
An XSS vulnerability was found in Kibana index patterns. Using this vu ...
An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users
EPSS
8.1 High
CVSS3