CVE-2017-11479

Source
https://cve.org/CVERecord?id=CVE-2017-11479
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11479.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-11479
Published
2017-09-29T01:34:48.530Z
Modified
2026-03-14T09:28:22.334129Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

References

Affected packages

Git / github.com/elastic/kibana

Affected ranges

Type
GIT
Repo
https://github.com/elastic/kibana
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.1.0"
        }
    ]
}

Affected versions

v4.*
v4.0.0
v4.0.0-beta1
v4.0.0-beta1.1
v4.0.0-beta2
v4.0.0-beta3
v4.0.0BETA1
v4.1.0
v4.2.0-beta1
v5.*
v5.0.0
v5.0.0-alpha5
v5.0.0-beta1
v5.0.0-rc1
v5.1.1
v5.2.0
v5.3.0
v5.4.0
v5.5.0
v5.6.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11479.json"