CVE-2022-38779

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-38779

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-38779.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-38779

Published

2023-02-22T00:15:11.213Z

Modified

2026-03-14T11:54:21.421333Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

References

Affected packages

Git / github.com/elastic/kibana

Affected ranges

Type

GIT

Repo

https://github.com/elastic/kibana

Events

Introduced

ee89fda8a17eff9c93f7400c102edf76cb4d7d8a

Fixed

00b0b0440dbf6f8c542448473e020c99d352a0f5

Introduced

57ca5e139a33dd2eed927ce98d8231a1f217cd15

Fixed

aabd37e8a9069bed4f63b8c457a6829f4581ab97

Database specific

{
    "versions": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.17.9"
        },
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.6.2"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-38779.json"