medium6.1
CVE-2018-20698
The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.
Impact
The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login redirects on the login page when basePath is set.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Search-Guard | Search Guard | before 6.3.0-16 |