medium6.1
CVE-2016-1000220
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
Impact
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 4.1.0 before 4.1.11 from 4.5.0 before 4.5.4 |