CVE-2022-23713

🗓️ 06 Jul 2022 13:56:13Reported by elasticType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 100 Views

A XSS vulnerability in Vega Charts Kibana integration allows arbitrary JavaScript executio

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-23713	6 Jul 202214:15	–	attackerkb
CNNVD	Vega 跨站脚本漏洞	6 Jul 202200:00	–	cnnvd
CNVD	Vega Charts Kibana Cross-Site Scripting Vulnerability	8 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-23713	6 Jul 202213:56	–	cvelist
Elastic	Elastic 8.3.1, 8.3.0, and 7.17.5 Security Update	30 Jun 202220:32	–	elastic
Elastic	Kibana 7.17.8 and 8.5.0 Security Update	9 Dec 202219:18	–	elastic
EUVD	EUVD-2022-28649	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Elastic Kibana and Elastic Endpoint Security	1 Jul 202200:00	–	ncsc
NVD	CVE-2022-23713	6 Jul 202214:15	–	nvd
OpenVAS	Elastic Kibana 7.0.0 < 7.17.5, 8.0.0 <= 8.2.3 XSS Vulnerability (ESA-2022-08)	11 Jul 202200:00	–	openvas

NVD

Node

elastic kibanaRange7.0.0–7.17.5

elastic kibanaRange8.0.0–8.2.3

[
  {
    "product": "kibana",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 7.0.0 through 7.17.4 and 8.0.0 through 8.2.3"
      }
    ]
  }
]