PT-2018-16224 · Elastic · Kibana

CVE-2018-3830 · Publicado 2018-09-19 · Atualizado 2023-03-03

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kibana versions 5.3.0 through 6.4.1

Description A cross-site scripting (XSS) issue was found in the source field formatter, allowing an attacker to obtain sensitive information or perform actions on behalf of other users.

Recommendations For versions 5.3.0 through 6.4.1, update to a version that contains a fix for this issue to prevent cross-site scripting attacks.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-3830

RHSA-2018:3537

Produtos afetados

Kibana

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3830 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-3830 · Nota de Segurança
• https://discuss.elastic.co/t/elastic-stack-6-4-1-and-5-6-12-security-update/149035 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-3830 · Aviso do Fabricante
• https://elastic.co/community/security · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:3537 · Aviso do Fabricante