CVE-2017-11481: XSS
First published: Fri Dec 08 2017(Updated: )
Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Credit: bressers@elastic.co
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Elastic Kibana | =5.6.0 | |
| Elastic Kibana | =5.6.1 | |
| Elastic Kibana | =5.6.2 | |
| Elastic Kibana | =5.6.3 | |
| Elastic Kibana | =5.6.4 | |
| Elastic Kibana | =6.0.0 | |
| Elastic Kibana | =6.0.0-alpha1 | |
| Elastic Kibana | =6.0.0-alpha2 | |
| Elastic Kibana | =6.0.0-beta1 | |
| Elastic Kibana | =6.0.0-beta2 | |
| Elastic Kibana | =6.0.0-rc1 | |
| Elastic Kibana | =6.0.0-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this Kibana vulnerability?
The vulnerability ID for this Kibana vulnerability is CVE-2017-11481.
What is the severity level of CVE-2017-11481?
CVE-2017-11481 has a severity level of 6.1, which is considered medium.
What is the affected software for CVE-2017-11481?
The affected software for CVE-2017-11481 is Kibana versions prior to 6.0.1 and 5.6.5.
Is there a fix available for CVE-2017-11481?
Yes, a fix is available for CVE-2017-11481. Users should update to Kibana version 6.0.1 or 5.6.5.
Where can I find more information about CVE-2017-11481?
More information about CVE-2017-11481 can be found at the following link: https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/elastic
- canonical/elastic kibana
- version/elastic kibana/5.6.0
- version/elastic kibana/5.6.1
- version/elastic kibana/5.6.2
- version/elastic kibana/5.6.3
- version/elastic kibana/5.6.4
- version/elastic kibana/6.0.0
- version/elastic kibana/6.0.0-alpha1
- version/elastic kibana/6.0.0-alpha2
- version/elastic kibana/6.0.0-beta1
- version/elastic kibana/6.0.0-beta2
- version/elastic kibana/6.0.0-rc1
- version/elastic kibana/6.0.0-rc2