CVE-2022-23707 in Kibana

Сводка

по MITRE • 11.02.2022

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Резервировать: 19.01.2022
• Раскрытие: 11.02.2022
• Модерация: принято
• Вход: VDB-192999
• CPE: готов
• CWE: CWE-79 (Подтверждённый)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00527
• KEV: Нет
• Деятельности: Очень низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23707
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23707
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23707/