medium6.1
CVE-2022-23713
A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a vict…
Impact
A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 7.0.0 before 7.17.5 from 8.0.0 through 8.2.3 |