CVE-2016-10366

CVE-2016-10366 affects Kibana: vulnerable in Kibana versions after and including 4.3 and before 4.6.2 (i.e., up to 4.6.1). The vulnerability is described as a cross-site scripting (XSS) flaw. No exploit details are provided in the supplied documents. Remediation: upgrade to Kibana 4.6.2 or later ...