VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 27, 2020· Updated Aug 4, 2024

CVE-2020-7017

CVE-2020-7017

Description

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Elastic/Kibanallm-fuzzy2 versions
    <6.8.11, <7.8.1+ 1 more
    • (no CPE)range: <6.8.11, <7.8.1
    • (no CPE)range: before 6.8.11 and 7.8.1
  • osv-coords2 versions
    pkg:bitnami/elkpkg:bitnami/kibana
    < 6.8.11+ 1 more
    • (no CPE)range: < 6.8.11
    • (no CPE)range: < 6.8.11

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.