Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
Elastic Kibana 输入验证错误漏洞
Vulnerability Description
Elastic Kibana是荷兰Elastic公司的一个应用系统。一个免费且开放的用户界面，能够让您对 Elasticsearch 数据进行可视化，并让您在 Elastic Stack 中进行导航。 Elastic Kibana 存在输入验证错误漏洞，该漏洞源于对用户提供的数据进行了不正确的清理。远程攻击者可以将受害者重定向到任意URL。以下产品及版本受到影响：Kibana: 6.0.0, 6.0.1, 6.1.0, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.2.0, 6.2.1, 6
CVSS Information
N/A
Vulnerability Type
N/A