Lucene search
+L

4 matches found

NVD
NVD
added 2015/12/07 8:59 p.m.26 views

CVE-2015-8131

Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7AI score0.0088EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2015/12/07 8:0 p.m.32 views

CVE-2015-8131

Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.9AI score0.0088EPSS
SaveExploits0References2
CVE
CVE
added 2015/12/07 8:0 p.m.66 views

CVE-2015-8131

Elastic Kibana is affected by a Cross-site Request Forgery (CSRF) vulnerability. Affected versions are Kibana prior to 4.1.3 and 4.2.x prior to 4.2.1. The issue allows a remote attacker to hijack the authentication of unspecified victims via unknown vectors. The root cause is a CSRF flaw in Kiban...

6.8CVSS7.2AI score0.0088EPSS
SaveExploits0References2Affected Software1
Elastic
Elastic
added 2015/11/18 10:46 p.m.10 views

Kibana Cross-site Request Forgery CVE-2015-8131

CVE: CVE-2015-8131 Affected versions: All versions up to and including 4.1.2 and 4.2.0. The vulnerability is a cross-site request forgery CSRF or XSRF that could allow an attacker to read and write changes to the .kibana index or gain read and write access to Kibana plugin actions. Remediation: A...

6.8CVSS6.9AI score0.0088EPSS
SaveExploits0
Rows per page
Query Builder