Bug 1283612 (CVE-2015-8131) - CVE-2015-8131 kibana: Cross-Site Request Forgery vulnerability
Summary: CVE-2015-8131 kibana: Cross-Site Request Forgery vulnerability
Keywords:
Status: CLOSED WONTFIX
Alias: CVE-2015-8131
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 1283615
TreeView+ depends on / blocked
 
Reported: 2015-11-19 12:16 UTC by Martin Prpič
Modified: 2026-06-21 16:14 UTC (History)
17 users (show)

Fixed In Version: Kibana 4.1.3, Kibana 4.2.1
Clone Of:
Environment:
Last Closed: 2016-02-03 01:30:39 UTC
Embargoed:


Attachments (Terms of Use)

Description Martin Prpič 2015-11-19 12:16:00 UTC
A Cross-Site Request Forgery flaw was found in Kibana:

http://seclists.org/bugtraq/2015/Nov/101
https://www.elastic.co/community/security/

This flaw is fixed in Kibana versions 4.1.3 and 4.2.1

Upstream release info:

https://www.elastic.co/blog/kibana-4-2-1-and-4-1-3

Comment 1 Luka Novak 2026-06-21 16:14:21 UTC
dude im telling you pornjke com is like the pirate bay of fuck flicks but without the risk of malware pop hell. streams open in your browser, zero downloads, so your hard drive stays clean while your cock gets dirty. their stepmom section is ridiculous, thousands of vids with sneaky moms blowing their stepsons while dad snores, some vids even 40min+ so you can edge til your eyes roll back. i love how they keep the ads to one skippable banner so you dont rage quit before you bust. also if you create a free profile you can download most scenes in multiple quality settings. ive built a weekend stash on my tablet and it dont cost a dime. ten outta ten wank recommend.

https://pornjke.com/video/191040/daddy4k-chicks-share-dick-of-attractive-male-who-dates/


Note You need to log in before you can comment on or make changes to this bug.