CVE-2024-23442
Kibana open redirect issue
Summary
Kibana open redirect issue
Original description
The description as published by the source.
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.11.1"},{"fixed":"8.14.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.11.1"},{"fixed":"8.14.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co