VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Feb 11, 2022· Updated Jun 17, 2026

CVE-2022-23707

CVE-2022-23707

Description

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Elastic/Kibana3 versions
    cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*range: >=7.5.1,<7.17.0
    • (no CPE)
    • (no CPE)range: 7.5.1 through 7.16.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.