The vulnerability of Kibana’s visualization data library “Vega” allows attackers to perform cross-site scripting attacks.

The vulnerability of the Vega library used by the Kibana data visualization service is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Elastic Stack 7.11.0 and 6.8.14 Security Update

Elasticsearch information disclosure ESA-2021-03 Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or...