Non notée
CVE-2017-8439 Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder
Description
Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kibana | 5.4.0 | Pas de correctif indiqué |
Références
- www.elastic.co www.elastic.co
- discuss.elastic.co discuss.elastic.co
- www.elastic.co www.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de Kibana
Les 196 CVE de Kibana →
CVE-2026-115295
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing…
4.3
Moyenne
CVE-2026-115294
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to…
7.3
Élevée
CVE-2026-115293
Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of…
6.5
Moyenne
CVE-2026-115292
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure…
4.3
Moyenne