Back to search
CVE-2022-23710
Published: Mar 3, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.
| Vendor | Product | Versions |
|---|---|---|
Elastic | kibana | affected For self-managed deployments the issue impacts versions 7.15.0, 7.15.1, and 7.15.2
For Elastic Cloud Services the issue impacts versions 7.15.0 through 7.17.0, and 8.0.0 |
Weaknesses (CWE)
References
https://security.netapp.com/advisory/ntap-20220325-0009/
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now