CVE-2022-23707CWE-79

An XSS vulnerability was found in Kibana index patterns

published February 11, 2022

CVSS
—
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-02-11T17:40Z
EPSS history
Timeline
  • 11 FEB 17:40Z
    An XSS vulnerability was found in Kibana index patterns
    cvelistv5