Lucene search

K
osvGoogleOSV:GHSA-M6GG-86C6-GFR9
HistoryMar 04, 2022 - 12:00 a.m.

Withdrawn: Cross-site Scripting in Kibana

2022-03-0400:00:15
Google
osv.dev
48

0.001 Low

EPSS

Percentile

33.6%

##Withdrawn: This advisory is for Kibana, not ElasticSearch as it was originally published, and is withdrawn as being out of scope of our supported ecosystems.

A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.

0.001 Low

EPSS

Percentile

33.6%