CVE-2020-7015CWE-79

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization

published June 3, 2020

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensitive information from, or perform destructive actions, on behalf of Kibana users who edit the TSVB visualization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00779 · 55.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-06-03T17:55Z
EPSS history
Timeline
  • 03 JUN 17:55Z
    Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization
    cvelistv5