CVE-2018-3818: XSS
Published Mar 30, 2018
·Updated
Kibana versions 5.1.1 to 6.1.2 and 5.6.6 had a cross-site scripting (XSS) vulnerability via the colored fields formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Affected Software
1 affected component
Elastic Kibana>=5.1.1<=6.1.2
Event History
Mar 30, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Kibana vulnerability?
The vulnerability ID for this Kibana vulnerability is CVE-2018-3818.
2
What is the severity of CVE-2018-3818?
The severity of CVE-2018-3818 is medium with a severity value of 6.1.
3
How does CVE-2018-3818 affect Kibana?
CVE-2018-3818 affects Kibana versions 5.1.1 to 6.1.2 and 5.6.6.
4
What is the impact of CVE-2018-3818?
CVE-2018-3818 allows an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
5
How can I fix CVE-2018-3818?
To fix CVE-2018-3818, it is recommended to update Kibana to a version higher than 6.1.2 or 5.6.6.