CVE-2022-38779

2023-02-2100:00:00

CWE-601

elastic

www.cve.org

kibana

open redirect

arbitrary website

0.001 Low

EPSS

Percentile

29.9%

JSON

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

CNA Affected

[
  {
    "vendor": "Elastic",
    "product": "kibana",
    "versions": [
      {
        "version": "Kibana Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.1",
        "status": "affected"
      }
    ]
  }
]