Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Elastic Kibana 跨站脚本漏洞
Vulnerability Description
Elastic Kibana是荷兰Elastic公司的一个应用系统。一个免费且开放的用户界面，能够让您对 Elasticsearch 数据进行可视化，并让您在 Elastic Stack 中进行导航。 Elastic Kibana 存在安全漏洞，该漏洞源于没有清理包含HTML片段的文档字段，能够将文档写入elasticsearch索引的攻击者可以注入HTML。
CVSS Information
N/A
Vulnerability Type
N/A