CVE-2018-20698

The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-09

Last modified

2024-08-05

Weaknesses

CWE-601

Affected products

• Search Guard (Search-guard)

References

• https://docs.search-guard.com/latest/changelog-kibana-6.x-16
• https://github.com/floragunncom/search-guard-kibana-plugin/pull/140