CVE-2020-7015

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensitive information from, or perform destructive actions, on behalf of Kibana users who edit the TSVB...

CVE-2020-7015

CVE-2020-7015 affects Kibana via a stored XSS flaw in the TSVB visualization. The issue exists in Kibana versions prior to 6.8.9 and 7.7.0, where editing or creating TSVB visualizations could allow an attacker to access sensitive information or perform destructive actions on behalf of Kibana user...

Elastic Stack 7.7.1 and 6.8.10 Security Update

Kibana cross site scripting XSS issue ESA-2020-08 The TSVB visualization in Kibana contains a stored XSS flaw. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensitive information from, or perform destructive actions, on behalf of Kibana users wh...

CVE-2020-7013: Improper Control of Generation of Code

Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An authenticated attacker with privileges to create TSVB visualizations could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissio...

CVE-2020-7015: Improper Neutralization of Input During Web Page Generation

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensitive information from, or perform destructive actions, on behalf of Kibana users who edit the TSVB...

PT-2020-19338

Name of the Vulnerable Software and Affected Versions Kibana versions prior to 6.8.9 Kibana versions prior to 7.7.0 Description The issue is related to a prototype pollution flaw in TSVB. An authenticated attacker with privileges to create TSVB visualizations could insert data that would cause...

PT-2020-19340

Name of the Vulnerable Software and Affected Versions Kibana versions prior to 6.8.9 Kibana versions prior to 7.7.0 Description The issue is related to a stored XSS flaw in the TSVB visualization. An attacker who can edit or create a TSVB visualization could obtain sensitive information from, or...

Elastic: Stored XSS in TSVB Visualizations Markdown Panel

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: An authenticated user can save...