Kibana open redirect issue(CVE-2024-23442)

概要

Kibana open redirect issue

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami elk

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.11.1"},{"fixed":"8.14.0"}]}]

Bitnami kibana

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.11.1"},{"fixed":"8.14.0"}]}]

参照URL

advisory discuss.elastic.co
web nvd.nist.gov