BIT-elk-2020-7017

vendorUSosv

view advisory published 2024-03-06Licence: per source

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-7017US	medium6.7	1.22% (69th)	—	2020-07-27
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could ob…

references

External citations — patches, advisories, analysis.

https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-7017WEB
https://www.elastic.co/community/security/ADVISORY
https://www.oracle.com//security-alerts/cpujul2021.htmlADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan