CVE-2020-7017CWE-79

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw

published July 27, 2020

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01220 · 68.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-07-27T18:00Z
EPSS history
Timeline
  • 27 JUL 18:00Z
    In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw
    cvelistv5