medium6.1
CVE-2022-23710
Withdrawn: Cross-site Scripting in Kibana
Impact
##Withdrawn: This advisory is for Kibana, not ElasticSearch as it was originally published, and is withdrawn as being out of scope of our supported ecosystems. A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim's browser.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.elasticsearch:elasticsearch | >= 7.16.0, < 7.17.1 | 7.17.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 7.15.0 through 7.17.0 Version 8.0.0 |