Medium severity6.1NVD Advisory· Published Feb 22, 2023· Updated Jun 17, 2026

CVE-2022-38779

Description

An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elastic/Kibana3 versions
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*range: >=7.0.0,<7.17.9
- (no CPE)
- (no CPE)range: Kibana Versions 7.0.0 through 7.17.8 and 8.0.0 through 8.6.1
Kibana/Kibanallm-fuzzy

Patches

Vulnerability mechanics

References

discuss.elastic.co/t/kibana-7-17-9-and-8-6-2-security-update/325782nvdRelease NotesVendor Advisory
www.elastic.co/community/securitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000