CVE-2017-11481

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-11481
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11481.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-11481
Related
Published
2017-12-08T18:29:00Z
Modified
2024-09-03T03:40:24.792394Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

References

Affected packages

Git / github.com/elastic/elasticsearch

Affected ranges

Type
GIT
Repo
https://github.com/elastic/elasticsearch
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
017411929664bba1d01ee5420d4316939b7c5509
Last affected
0424099674571fac2ff26188bb6b9d2860be605a
Last affected
119515d4728223bae258aea77fae8ac40369b9b4
Last affected
1a2f2657be59b98ba20133ea3e8b66eb72c076b0
Last affected
23ffa4fdc2e2a6653171ba7c0fa96ff06bc8ca2c
Last affected
57e20f3c86c8af747761149eb7eefbf7caea4b9a
Last affected
667b4976e31f646de58794d03306ab8bfd4f743b
Last affected
781a83507f0598b36512cba088ffeefa73b4bbe6
Last affected
896afa4414e42b84408ecbca6ad66a43f65a13ae
Last affected
8bbedf5fe55fa22888e107898e5c16ca7f82c636
Last affected
8f0685b924b9159807704ec2593b26e28105da44
Last affected
b9c0df26543ceb25ca19519069d3197f126536fb
Type
GIT
Repo
https://github.com/elastic/kibana
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
04485d7d34cc0e94f58146577892fb2c4a6e7f56
Last affected
0766ab238177e366236f3cdf34b19b6c5ffaf837
Last affected
12d17c6d111705f0c0c29fbab66eb22eda31dcdf
Last affected
3cb25ad0b62e8b085f4fabf2af7efca03124c1b9
Last affected
815b082799cc42b0a66d52689d901525b5e6f182
Last affected
864b8719e2814b7667d5831c415a79026d78ea9f
Last affected
b7f519704ae0d25f085e3278198e2abec1d9ef6e
Last affected
d1e7b4cfb06c4d9156fb1e691853b36ff5801d57
Last affected
e5b6450423e5b179eb85810b997dd3fd0c8c7ddb
Last affected
efd2403e605c9f695a87929083421ba09f3ac54e
Last affected
f363a8fe7aeeb6a535e0bb43b3b1916f26ab3732
Last affected
f8bc449f5a6b28d0597730b1cf03fefe7e33422e

Affected versions

v0.*

v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.14.0
v0.15.0
v0.16.0
v0.17.0
v0.18.0
v0.19.0
v0.19.0.RC1
v0.19.0.RC2
v0.19.0.RC3
v0.20.0.RC1
v0.4.0
v0.5.0
v0.5.1
v0.6.0
v0.7.0
v0.7.1
v0.8.0
v0.9.0
v0.90.0
v0.90.0.Beta1
v0.90.0.RC1
v0.90.0.RC2

v1.*

v1.0.0.Beta1
v1.0.0.Beta2
v1.0.0.RC1

v4.*

v4.0.0
v4.0.0-beta1
v4.0.0-beta1.1
v4.0.0-beta2
v4.0.0-beta3
v4.0.0BETA1
v4.1.0
v4.2.0-beta1

v5.*

v5.0.0-alpha1
v5.0.0-alpha2
v5.0.0-alpha3
v5.0.0-alpha4
v5.0.0-alpha5
v5.6.0
v5.6.1
v5.6.2
v5.6.3

v6.*

v6.0.0-alpha1
v6.0.0-alpha2
v6.0.0-beta1
v6.0.0-beta2
v6.0.0-rc1