EUVD-2018-15609

Malware in sbrugna...

Kibana Tag Cloud Visualization Cross-Site Scripting Vulnerability

Kibana is an open source analytics and visualization platform designed to work with Elasticsearch.Kibana provides the ability to search, view, and interact with data stored in Elasticsearch indexes. Developers or operations staff can easily perform advanced data analysis and visualize data in a...

PT-2018-16215 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana versions after 5.1.1 and before 5.6.7 Kibana versions before 6.1.3 Description: A cross-site scripting XSS issue was found in the tag cloud visualization, potentially allowing an attacker to obtain sensitive information or perform...

CVE-2018-3821: Improper Neutralization of Input During Web Page Generation

Kibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting XSS vulnerability in the tag cloud visualization that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...