Description (CNA)
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / kibana | affected Kibana Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.1 |
CWE
CWE-601
References
- https://www.elastic.co/community/security
- https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782
ADP enrichment
No English description supplied.