PT-2023-23307 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana versions 8.0.0 through 8.7.0 Description: The issue is an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute JavaScript code. This...