CVE-2022-23707 in Kibana

Tóm tắt

Bởi MITRE • 11/02/2022

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 19/01/2022
• Tiết lộ: 11/02/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-192999
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00527
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23707
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23707
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23707/