CVE-2020-7017

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a reg...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami elk

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.8.11"},{"introduced":"7.0.0"},{"fixed":"7.8.1"}]}]

Bitnami kibana

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.8.11"},{"introduced":"7.0.0"},{"fixed":"7.8.1"}]}]

Références

advisory discuss.elastic.co
advisory elastic.co
advisory oracle.com
web nvd.nist.gov