PT-2025-22734 · Unknown · Dastan800 Visual Builder

Name of the Vulnerable Software and Affected Versions: dastan800 Visual Builder versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability that allows Reflected XSS in dastan800 Visual Builder. Recommendations: For versions 1.2.2 and earlier, update to a...

SUSE CVE-2017-8439

Kibana version 5.4.0 was affected by a Cross Site Scripting XSS bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users...

CVE-2017-8439

Kibana version 5.4.0 was affected by a Cross Site Scripting XSS bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users...

Kibana 6.1.1 security update

Kibana arbitrary code execution issue ESA-2017-24 Kibana version 6.1.0 had an arbitrary code execution vulnerability in the Math.js package which is used by math aggregations in Time Series Visual Builder. Kibana users could construct a math aggregation capable of executing arbitrary code on the...

Elasticsearch Kibana cross-site scripting vulnerability (CNVD-2017-11644)

Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands.Time Series Visual Builder is a visualization function. A cross-site scripting vulnerability exists in Time...

Cross-site Scripting (XSS)

kibana is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript through the Time Series Visual Builder...

CVE-2017-8439

Kibana version 5.4.0 was affected by a Cross Site Scripting XSS bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users...

Cross site scripting

Kibana version 5.4.0 was affected by a Cross Site Scripting XSS bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users...

CVE-2017-8439

Kibana version 5.4.0 was affected by a Cross Site Scripting XSS bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users...

CVE-2017-8439

Kibana version 5.4.0 was affected by a Cross Site Scripting XSS bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users...

CVE-2017-8439

Kibana 5.4.0 has a Cross-Site Scripting (XSS) vulnerability in the Time Series Visual Builder (CVE-2017-8439) that could allow a Kibana user’s data to be exposed. The Connected documents provide CVSS metrics (v3 base 6.1 MEDIUM, network access, user interaction required) and confirm the affected ...