CVE Database
/

CVE-2020-7017

Back to search

CVE-2020-7017

Published: Jul 27, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

VendorProductVersions

Elastic

Kibana

affected
before 6.8.11 and 7.8.1

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now