Aller au contenu
en Se connecter
Non notée

CVE-2020-7011 Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in…

Description

Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be rendered by the web browser. If an attacker is able to control the contents of such a field, they could execute arbitrary JavaScript in the victim�s web browser.

Produits et versions touchés

Produit Versions touchées Corrigé en
Elastic App Search Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Elastic App Search

Les 2 CVE de Elastic App Search →
CVE-2021-22140 Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue (XXE) in the… Non notée
Suivre cette CVE