CVE-2022-23713

2022-07-0613:56:13

CWE-79

elastic

www.cve.org

0.001 Low

EPSS

Percentile

33.5%

JSON

A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.

CNA Affected

[
  {
    "product": "kibana",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 7.0.0 through 7.17.4 and 8.0.0 through 8.2.3"
      }
    ]
  }
]