Lucene search
+L

27 matches found

OSV
OSV
added 2017/06/16 9:29 p.m.4 views

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

8.8CVSS5.8AI score0.00815EPSS
SaveExploits0References2
NVD
NVD
added 2017/06/16 9:29 p.m.24 views

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

8.8CVSS8.5AI score0.00815EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2017/06/16 9:0 p.m.32 views

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

8.6AI score0.00815EPSS
SaveExploits0References2
CVE
CVE
added 2017/06/16 9:0 p.m.60 views

CVE-2016-1000218

The connected documents indicate a CSRF vulnerability in Elastic Kibana Reporting plugin for Kibana, version 2.4.0. The issue allows an authenticated user to trigger generation of redundant reports when visiting a specially crafted page. The root cause is a CSRF weakness in the Reporting plugin; ...

8.8CVSS8.4AI score0.00815EPSS
SaveExploits0References2Affected Software1
Atlassian
Atlassian
added 2009/03/19 4:23 p.m.24 views

Reporting Plugin- Cross-site scripting error

Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...

0.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2009/03/19 4:23 p.m.26 views

Reporting Plugin- Cross-site scripting error

Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...

0.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2009/03/19 4:23 p.m.23 views

Reporting Plugin- Cross-site scripting error

Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...

0.1AI score
SaveExploits0
Rows per page
Query Builder