Skip to content
fr Sign in
Not rated

CVE-2020-7011 Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in…

Description

Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be rendered by the web browser. If an attacker is able to control the contents of such a field, they could execute arbitrary JavaScript in the victim�s web browser.

Affected products and versions

Product Affected versions Fixed in
Elastic App Search Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Elastic App Search

The 2 CVEs of Elastic App Search →
CVE-2021-22140 Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue (XXE) in the… Not rated
Track this CVE