CVE-2017-8451

With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@elastic.co

Published

2017-06-16

Last modified

2024-08-05

Weaknesses

CWE-601

Affected products

• Elastic X-pack Security (Elastic)
• Kibana (Elastic)

References

• https://www.elastic.co/community/security