未評価
Kibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS) vulnerability in the tag cloud visualization that could allow...
CVE-2018-3821
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Kibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS) vulnerability in the tag cloud visualization that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
参照URL
- advisory discuss.elastic.co