Description (CNA)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / Kibana | affected 7.0.0 through 7.17.29; affected 8.14.0 through 8.18.7; affected 8.19.0 through 8.19.4; affected 9.0.0 through 9.0.7; affected 9.1.0 through 9.1.4 |
CWE
CWE-79
References
- https://discuss.elastic.co/t/kibana-8-18-8-8-19-5-9-0-8-and-9-1-5-security-update-esa-2025-20/382449
ADP enrichment
No English description supplied.
No references supplied.