CVE-2024-23442
Kibana open redirect issue
Résumé
Kibana open redirect issue
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.11.1"},{"fixed":"8.14.0"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.17.22"},{"introduced":"8.11.1"},{"fixed":"8.14.0"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co