Bug 2172352 (CVE-2022-38779) - CVE-2022-38779 kibana: Kibana open redirect issue (ESA-2023-03)
Summary: CVE-2022-38779 kibana: Kibana open redirect issue (ESA-2023-03)
Keywords:
Status: NEW
Alias: CVE-2022-38779
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2176289 2176291 2176292
Blocks: 2169677
TreeView+ depends on / blocked
 
Reported: 2023-02-22 04:49 UTC by Avinash Hanwate
Modified: 2023-07-21 22:26 UTC (History)
16 users (show)

Fixed In Version: Kibana 7.17.9 and 8.6.2
Doc Type: If docs needed, set a value
Doc Text:
An open redirect flaw was found in Kibana. This issue can lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Avinash Hanwate 2023-02-22 04:49:28 UTC 
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

https://discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782
Comment 1 Anten Skrabec 2023-03-07 22:08:23 UTC 
Created puppet-kibana3 tracking bugs for this issue:

Affects: openstack-rdo [bug 2176289]
Note You need to log in before you can comment on or make changes to this bug.