1475346 – (CVE-2015-9056) CVE-2015-9056 kibana: Cross-site scripting in kibana prior to 4.1.3 and 4.2.1

Bug 1475346 (CVE-2015-9056) - CVE-2015-9056 kibana: Cross-site scripting in kibana prior to 4.1.3 and 4.2.1

Summary: CVE-2015-9056 kibana: Cross-site scripting in kibana prior to 4.1.3 and 4.2.1

Attachments	(Terms of Use)

Description Pedro Sampaio 2017-07-26 13:25:14 UTC

Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack. 

References:

https://www.elastic.co/community/security

Comment 2 Jason Shepherd 2018-04-03 06:40:15 UTC

Openshift 3.7 uses Kibana 4.6.4. Marking Openshift as not affected.

Note You need to log in before you can comment on or make changes to this bug.