3 matches found
XSS to LFI in Runcode Feature
Description By default runcode santized document prefix but if html encode to...
PT-2022-10685 · Elastic · Kibana
Name of the Vulnerable Software and Affected Versions: Kibana affected versions not specified Description: It was discovered that Kibana was not sanitizing document fields containing HTML snippets. An attacker with the ability to write documents to an Elasticsearch index could inject HTML. When t...
SafeText - Script To Remove Homoglyphs And Zero-Width Characters To Allow For Safe Distribution Of Documents From Anonymous Sources
Tool to sanitize text to allow for safe distribution of documents from anonymous sources by removing zero-width characters and homoglpyhs. Individuals attempting to leak an email or other text file face the risk of identification through fingerprinting. Fingerprinting often occurs when the origin...