CVE-2017-11479: XSS
Published Sep 28, 2017
·Updated
Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Affected Software
22 affected components
Elastic Kibana=5.0.0
Elastic Kibana=5.0.1
Elastic Kibana=5.0.2
Elastic Kibana=5.1.1
Elastic Kibana=5.1.2
Elastic Kibana=5.2.0
Elastic Kibana=5.2.1
Elastic Kibana=5.2.2
Elastic Kibana=5.3.0
Elastic Kibana=5.3.1
Elastic Kibana=5.3.2
Elastic Kibana=5.3.3
Elastic Kibana=5.4.0
Elastic Kibana=5.4.1
Elastic Kibana=5.4.2
Elastic Kibana=5.4.3
Elastic Kibana=5.5.0
Elastic Kibana=5.5.1
Elastic Kibana=5.5.2
Elastic Kibana=5.5.3
Elastic Kibana=5.6.0
Elasticsearch Kibana=5.1.0
Event History
Sep 28, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11479?
CVE-2017-11479 is considered a high-severity vulnerability due to its ability to exploit cross-site scripting (XSS) and potentially compromise sensitive user data.
2
How do I fix CVE-2017-11479?
To remediate CVE-2017-11479, upgrade Kibana to version 5.6.1 or later.
3
Which versions of Kibana are affected by CVE-2017-11479?
CVE-2017-11479 affects Kibana versions prior to 5.6.1.
4
What type of vulnerability is CVE-2017-11479?
CVE-2017-11479 is a cross-site scripting (XSS) vulnerability.
5
What impact can CVE-2017-11479 have on users?
If exploited, CVE-2017-11479 can allow attackers to perform destructive actions or access sensitive information of other Kibana users.