Cross site request forgery (csrf)

2017-06-1621:29:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.8%

JSON

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page.

CPENameOperatorVersion
kibana_reportingeq2.4.0

CPE	Name	Operator	Version
	kibana_reporting	eq	2.4.0

References

www.securityfocus.com/bid/99253

www.elastic.co/community/security