CVE-2017-11479

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-11479
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11479.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-11479
Published
2017-09-29T01:34:48Z
Modified
2025-04-20T03:54:53.321522Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

References

Affected packages

Git / github.com/elastic/elasticsearch

Affected ranges

Type
GIT
Repo
https://github.com/elastic/elasticsearch
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
080bb4748b0c6484538c1deb76a77d7f3edbbeca
Last affected
19c13d032a6a6b89ab6e5440cf1b3b07b948afbe
Last affected
24e05b955cc926de349ad43b3db7504b0f9f1ed2
Last affected
253032b4a7818992af360097e3ddc1475fa7b044
Last affected
260387d2e4c0422c00adb04d160690ed1da05209
Last affected
2cfe0dfa0304be2f9b6fc4508ddeb08e42d15678
Last affected
30681957d1234e849701b76d37c08c374252abe0
Last affected
3adb13b1f49935973b974a2517caa0d4d59bf4d0
Last affected
5395e21a627bfe3ab8f037f49e68a9060bc967dd
Last affected
5f9cf58c67cb067ef3565862d18d2f6ad05a9a2f
Last affected
65e26e66dadbb02b96c0033835ee822b4569c651
Last affected
780f8c429c5b945035c887ec93a64579cc1d0f20
Last affected
781a83507f0598b36512cba088ffeefa73b4bbe6
Last affected
929b078898b27e05476cc6212bc0b96d3eb8b7b1
Last affected
9305a5e8d8f0b3bbab3872cf2f0aee45d72a8aea
Last affected
b2f0c096c18393e016cb0ad89fcb9db6bdcd5907
Last affected
c8c4c16c38f7262a27ad3beb509c2ae1b15d156a
Last affected
db0d481864d5eb1aa9756736e118fddb69725168
Last affected
eed30a8e9bb74322a9c8dd73d5896f70829d43e2
Last affected
f6b49518e4054d4787474dfbbbfe882f05696eee
Last affected
f9d9b74f0fb6d9be39d27f658479556230ecd8c1
Type
GIT
Repo
https://github.com/elastic/kibana
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
03953ddae5c505842cc39d2df349b7e35f30ee5b
Last affected
0c83527f76c8338a1ab83a30b42e2a46cadf74da
Last affected
12d17c6d111705f0c0c29fbab66eb22eda31dcdf
Last affected
2ee15d7ceb10d52bef0e5ee58d3f9c5a238cb786
Last affected
32ff80dbccdff23911015425bfaf4ae32ea0c0c1
Last affected
3352f60107f55921ad4761fa1f77d67a0315e6ad
Last affected
366c5375afb5eaae6b609dae1c22829ee1344c61
Last affected
476a0517b92038a4b719458c10666c62e4bb2c55
Last affected
5aaf7ebf6cd3398b2ba6076d4e4e7e070e19a5a3
Last affected
6538112a1d244727704f4f11d152113a5133e871
Last affected
6c330d3c77b0af1c5a29302e0a7a45f33fcb6869
Last affected
725943bf9e3ca6f5e7d286ded25b0207fc68caaa
Last affected
75afc9fbb024df55fa01acd1a4c2f76d44961746
Last affected
85a6f4da184835398a4dea748d15cfffa527aa22
Last affected
8f2ace746d1b84702bb618308efa65dc0c3f8a34
Last affected
9b0119b706e53fbd67b447381fe80f71b9996893
Last affected
b7417c4d48eb56df8d5448a2eea14dd56356c28a
Last affected
c0415be9336be790801e88b92c967e1958c9fd10
Last affected
c5af7a418333df6a934b8d1a5648c675641388bd
Last affected
ce7908cdac87af1e3b02ac4038fc3985602cf95a
Last affected
e1950ab7d0686b3a01caa0899faf4bf5a5e4904c
Last affected
ed55995668f95ce28fe5dad55ab4a0da67d2a7b6

Affected versions

v0.*

v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.14.0
v0.15.0
v0.16.0
v0.17.0
v0.18.0
v0.19.0
v0.19.0.RC1
v0.19.0.RC2
v0.19.0.RC3
v0.20.0.RC1
v0.4.0
v0.5.0
v0.5.1
v0.6.0
v0.7.0
v0.7.1
v0.8.0
v0.9.0
v0.90.0
v0.90.0.Beta1
v0.90.0.RC1
v0.90.0.RC2

v1.*

v1.0.0.Beta1
v1.0.0.Beta2
v1.0.0.RC1

v4.*

v4.0.0
v4.0.0-beta1
v4.0.0-beta1.1
v4.0.0-beta2
v4.0.0-beta3
v4.0.0BETA1
v4.1.0
v4.2.0-beta1

v5.*

v5.0.0
v5.0.0-alpha1
v5.0.0-alpha2
v5.0.0-alpha3
v5.0.0-alpha4
v5.0.0-alpha5
v5.0.0-beta1
v5.0.0-rc1
v5.0.1
v5.1.1
v5.2.0
v5.2.1
v5.3.0
v5.3.1
v5.3.2
v5.3.3
v5.4.0
v5.4.1
v5.4.2
v5.4.3
v5.5.0
v5.5.1
v5.6.0