VYPR
Get started
← All advisories
Medium severity6.1NVD Advisory· Published Jun 16, 2017· Updated May 13, 2026

CVE-2017-8451

CVE-2017-8451

Description

With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.

Affected products

2
  • Elastic/Kibana
    cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
    Range: <=5.3.0
  • Elastic/Elastic X-Pack Securityv5
    Range: before 5.3.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.