CVE-2017-8439

Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@elastic.co

Published

2017-06-05

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Kibana (Elastic)

References

• https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952
• https://www.elastic.co/blog/kibana-5-4-1-and-5-3-3-released
• https://www.elastic.co/community/security