CVE-2021-22142

CVE-2021-22142 relates to Kibana Reporting using an embedded Chromium browser to render downloadable reports. The vulnerability arises if a user with report-generation permissions can render arbitrary HTML, potentially leveraging Chromium vulnerabilities; Kibana implements protections to limit co...

CVE-2021-22142 Kibana Reporting vulnerabilities

Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to generate the downloadable reports. If a user with permissions to generate reports is able to render arbitrary HTML with this browser, they may be able to leverage known Chromium vulnerabilities to condu...

Elastic Stack 7.13.0 and 6.8.16 Security Update

Kibana url redirection flaw ESA-2021-12 An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website. Affected Versions: All versions of Kibana before 7.13....